Your message dated Sun, 09 Jun 2024 04:30:20 +0000
with message-id <[email protected]>
and subject line Bug#1072784: Removed package(s) from unstable
has caused the Debian Bug report #840385,
regarding squeak-plugins-scratch: Allow all console users access to the USB 
device
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
840385: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840385
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: squeak-plugins-scratch
Version: 1.4.0.2~svn.r83-2.1
Tags: patch
Severity: important

When installing Debian, the initial user was traditionally made a member
of the plugdev group, and this granted access to local hardware dongles
when this user is logged in.  This approach causes problems for users
originating from directory services like LDAP and Active Directory, as
such plugdev membership can not be granted globally.  The plugdev
membership can be assigned during login (using pam_group), but still
this approach is problematic because left behind processes keep the
group membership even when the user is no longer logged in on the
machine, allowing background processes to get access to other peoples
hardware.

There is an alternative to group membership for device access, using
file system ACLs, and with systemd this is the recommended default
according to the systemd maintainers.  To enable it for a given device,
the 'access' tag can be set.

Please do so for the squeak-plugins-scratch udev rule, to allow the
device to work for any console user, not only the one created during
installation.  The key part is the TAG+="uaccess" part.

I also suggest to add the ID_LEGO_MINDSTORMS attribute we in the Debian
LEGO tema are trying to get set for all lego related udev rules in
Debian.

Here is a patch:

--- debian/95-wedo.rules.orig   2016-10-11 06:29:18.679368276 +0000
+++ debian/95-wedo.rules        2016-10-11 06:32:17.009619728 +0000
@@ -1,2 +1,3 @@
-ATTRS{idVendor}=="0694", ATTRS{idProduct}=="0003", SUBSYSTEMS=="usb", 
ACTION=="add", MODE="0666", GROUP="plugdev"
-
+ATTRS{idVendor}=="0694", ATTRS{idProduct}=="0003", SUBSYSTEMS=="usb", 
ACTION=="add", \
+  MODE="0666", GROUP="plugdev", \
+  ENV{ID_LEGO_MINDSTORMS}=="1", TAG+="uaccess"

I suspect the plugdev/mode part can be removed, but did not suggest to
do so at this time because I am unsure how it affect non-systemd users.

-- 
Happy hacking
Petter Reinholdtsen

--- End Message ---
--- Begin Message ---
Version: 1.4.0.2~svn.r83-3.1+rm

Dear submitter,

as the package squeak-plugins-scratch has just been removed from the Debian 
archive
unstable we hereby close the associated bug reports.  We are sorry
that we couldn't deal with your issue properly.

For details on the removal, please see https://bugs.debian.org/1072784

The version of this package that was in Debian prior to this removal
can still be found using https://snapshot.debian.org/.

Please note that the changes have been done on the master archive and
will not propagate to any mirrors until the next dinstall run at the
earliest.

This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
[email protected].

Debian distribution maintenance software
pp.
Scott Kitterman (the ftpmaster behind the curtain)

--- End Message ---

Reply via email to