Just a brief update on this -- I snagged a few Yubikey FIDO specific devices and they seem to work fine and as you'd expect. The issue seems to be isolated to the Yubikey 4 / the ones that support smart card features / things of that nature.
Color me confused. On Mon, Mar 19, 2018 at 12:17 AM, Jon R. <bil...@gmail.com> wrote: > > Looks like the X server in target VM cannot access the device. See > > ~/.local/share/xorg/X.0.log there for lines like this: > > > > [247082.612] (EE) xf86OpenSerial: Cannot open device /dev/input/event1 > > Permission denied. > > [247082.612] (II) event1: opening input device '/dev/input/event1' > failed (Permission denied). > > [247082.612] (II) event1 - failed to create input device > '/dev/input/event1'. > > > In Fedora there is "ykpers" package, which ships appropriate udev rules > > to fix permissions. > > This doesn't appear to be the issued. The only relevant messages I'm > seeing in both the sys-usb VM & the one I'm attaching it to (personal in > this case) is the following: > > > [ 684.323] (II) config/udev: Adding input device Yubico Yubikey 4 > OTP+CCID (/dev/input/event8) > > [ 684.323] (II) No input driver specified, ignoring this device. > > [ 684.323] (II) This device may have been added with another device > file. > > This appears in the sys-usb ~/.local/xorg/Xorg.0.log upon plugging in the > Yubikey however the Yubikey functions as usual. When attaching the device > to another VM the local ~/.local/xorg/Xorg.0.log shows the same message as > above however it does not work. > > Just to remove the udev rules being the potential culprit I added both > ykpers / ykpers-devel to the fedora template and rebooted. The same > behavior persists. > > On Sun, Mar 18, 2018 at 11:43 AM, Marek Marczykowski-Górecki < > marma...@invisiblethingslab.com> wrote: > >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA256 >> >> On Fri, Mar 09, 2018 at 12:34:02PM -0500, Jon R. wrote: >> > Hello, >> > >> > I've scoured around the mailing lists / SO / Reddit and haven't come >> across >> > a solution to this yet. I'm running 4.0 (R4.0) and when I attempt to >> use my >> > Yubikey it's seemingly not picking up any input on the button press. >> > >> > It's detecting the USB properly and I can attach it fine: >> > >> > [cloe@dom0 Desktop]$ qvm-usb >> > BACKEND:DEVID DESCRIPTION USED BY >> > sys-usb:2-1 Yubico_Yubikey_4_OTP+CCID >> > >> > [cloe@dom0 Desktop]$ qvm-usb attach work sys-usb:2-1 >> > >> > [cloe@dom0 Desktop]$ qvm-usb >> > BACKEND:DEVID DESCRIPTION USED BY >> > sys-usb:2-1 Yubico_Yubikey_4_OTP+CCID work >> > >> > However upon button presses on the Yubikey in the "work" domain there >> is no >> > action. I've tested this in gedit, the terminal and elsewhere to no >> avail. >> > >> > Can someone point me in the right direction as to what may be happening? >> > I've successfully attached storage devices and other smart card related >> > devices without any issue so it seems to be isolated to the Yubikey >> itself. >> > I've tried 2 separate Yubikey 4's and an older version to no avail. >> >> Looks like the X server in target VM cannot access the device. See >> ~/.local/share/xorg/X.0.log there for lines like this: >> >> [247082.612] (EE) xf86OpenSerial: Cannot open device /dev/input/event1 >> Permission denied. >> [247082.612] (II) event1: opening input device '/dev/input/event1' >> failed (Permission denied). >> [247082.612] (II) event1 - failed to create input device >> '/dev/input/event1'. >> >> In Fedora there is "ykpers" package, which ships appropriate udev rules >> to fix permissions. >> >> - -- >> Best Regards, >> Marek Marczykowski-Górecki >> Invisible Things Lab >> A: Because it messes up the order in which people normally read text. >> Q: Why is top-posting such a bad thing? >> -----BEGIN PGP SIGNATURE----- >> >> iQEzBAEBCAAdFiEEhrpukzGPukRmQqkK24/THMrX1ywFAlqoECkACgkQ24/THMrX >> 1ywKfgf/VZgu5vIHC0sNztwJU6+8nZ23LaBtoEAceGdN3v9GZCkVY0kFDQ6jDhKO >> Jzp3wVPNM2XopNXmo+5mCgheL6nFGEQZfv6yB4MSwAUqqzcKxXy3eBkxAvAHfr3F >> g0H/lEYLLQImuoaEgz0RfQZUwxz3VKItakj2S6tqUfDzUvprFTo1Gvhv/xT1wp+6 >> OcfK953ID4pl1DTBdf18DOQcTFIxWplGpHBEScJVjFVrtVtxlW72c/kJvliEl7uh >> EQjGtCM3MHNL4GC2x8+n5aWrfva9tiEqVXlubvo/ReFbCtpqISxJI8TQkCi1IC8g >> pAbBb8scoDJ9ik97GjvhMfoDuXwZvw== >> =Ut6d >> -----END PGP SIGNATURE----- >> > > -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CAJd29SRBY5M0Ut%3Dvz6HMuCn1%3Dj92%2B67P35q8G15%3DPnNZUXj1gA%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
