Your message dated Tue, 08 Nov 2016 22:03:55 +0000
with message-id <e1c4eum-000fsb...@fasolo.debian.org>
and subject line Bug#840380: fixed in fpga-icestorm 0~20160913git266e758-3
has caused the Debian Bug report #840380,
regarding fpga-icestorm: Allow all console users access to the USB device
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
840380: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840380
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: fpga-icestorm
Version: 0~20160218gitf2b2549-2
Tags: patch
Severity: important

When installing Debian, the initial user was traditionally made a member
of the plugdev group, and this granted access to local hardware dongles
when this user is logged in.  This approach causes problems for users
originating from directory services like LDAP and Active Directory, as
such plugdev membership can not be granted globally.  The plugdev
membership can be assigned during login (using pam_group), but still
this approach is problematic because left behind processes keep the
group membership even when the user is no longer logged in on the
machine, allowing background processes to get access to other peoples
hardware.

There is an alternative to group membership for device access, using
ACL, and with systemd this is the recommended default.  To enable it for
a given device, the 'access' tag can be set.

Please do so for the fpga-icestorm udev rule, to allow the device to
work for any console user, not only the one created during installation.
Here is a patch:

diff -ur fpga-icestorm/debian/40-fpga-icestorm.rules 
fpga-icestorm-0~20160218gitf2b2549/debian/40-fpga-icestorm.rules
--- fpga-icestorm/debian/40-fpga-icestorm.rules 2016-10-11 04:59:54.702535444 
+0000
+++ fpga-icestorm-0~20160218gitf2b2549/debian/40-fpga-icestorm.rules    
2016-10-11 04:58:39.921570952 +0000
@@ -1 +1 @@
-ATTRS{idVendor}=="0403", ATTRS{idProduct}=="6010", MODE="0660", GROUP="plugdev"
+ATTRS{idVendor}=="0403", ATTRS{idProduct}=="6010", MODE="0660", 
GROUP="plugdev", TAG+="uaccess"

I suspect the plugdev/mode part can be removed, but did not suggest to
do so at this time because I am unsure how it affect non-systemd users.

-- 
Happy hacking
Petter Reinholdtsen

--- End Message ---
--- Begin Message ---
Source: fpga-icestorm
Source-Version: 0~20160913git266e758-3

We believe that the bug you reported is fixed in the latest version of
fpga-icestorm, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 840...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Ruben Undheim <ruben.undh...@gmail.com> (supplier of updated fpga-icestorm 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 08 Nov 2016 22:45:14 +0100
Source: fpga-icestorm
Binary: fpga-icestorm-chipdb fpga-icestorm
Architecture: source
Version: 0~20160913git266e758-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Science Maintainers 
<debian-science-maintainers@lists.alioth.debian.org>
Changed-By: Ruben Undheim <ruben.undh...@gmail.com>
Description:
 fpga-icestorm - Tools to handle the bitstream format of Lattice iCE40 FPGAs
 fpga-icestorm-chipdb - Chip database files for fpga-icestorm
Closes: 840380
Changes:
 fpga-icestorm (0~20160913git266e758-3) unstable; urgency=medium
 .
   * Addded 'Tag+="uaccess"' to udev rule. Thanks Petter! (Closes: #840380)
Checksums-Sha1:
 554063f33ce48e1c06a5caeb958136f372d25ba7 2208 
fpga-icestorm_0~20160913git266e758-3.dsc
 afce9ac3c6b7b6c456a22f688c4257e978bf7793 8924 
fpga-icestorm_0~20160913git266e758-3.debian.tar.xz
Checksums-Sha256:
 afb4fcedb7e0c2ff1f4f14a65258ad5eb838a8b8263dd8cda04b5473eafa6763 2208 
fpga-icestorm_0~20160913git266e758-3.dsc
 b3ebaaca8bf817524eca649af0022569a3fc8e2a26ebff407c13a24ccebccfcb 8924 
fpga-icestorm_0~20160913git266e758-3.debian.tar.xz
Files:
 5535333268bc484f80561f68de6be7fa 2208 electronics optional 
fpga-icestorm_0~20160913git266e758-3.dsc
 239f5c8e6b0a06bf9c7b6b81761b05d9 8924 electronics optional 
fpga-icestorm_0~20160913git266e758-3.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=li1+
-----END PGP SIGNATURE-----

--- End Message ---
-- 
debian-science-maintainers mailing list
debian-science-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/debian-science-maintainers

Reply via email to