-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 02/24/2012 09:34 AM, Bob Goodwin wrote: > On 24/02/12 08:50, Michael Schwendt wrote: >> On Fri, 24 Feb 2012 07:16:43 -0500, BG (Bob) wrote: >> >>> [bobg@box6 ~]$ getfacl /dev/bus/usb/001/006 getfacl: Removing >>> leading '/' from absolute path names # file: >>> dev/bus/usb/001/006 # owner: root # group: root user::rw- >>> group::rw- other::r-- >> The user access ACL entry is missing. That explains why your >> ordinary user cannot access the device. (I assume that udev and >> systemd work fine on your machine, or have you noticed issues >> that might be relevant?) >> >>> Do I need to chown bobg here? It looks like it ought to work >>> as is for bobg with 664 ownership? >> That won't survive a reboot, and when removing+readding the >> device the problem would reappear. >> >> Do you run with SELinux enabled and enforcing? > > Yes > >> Do you get denials in /var/log/audit/audit.log? (it could be that >> XFCE doesn't run the SELinux troubleshooter, so you would not >> learn about SELinux problems) > > I don't get any SELinux warnings but then I don't know if that > function is working either. The log data is overwhelming! I see > nothing that seems to pertain to "sane." But I could have missed it > ... I tried checking the end of the log immediately after xsane > errored, saw nothing I recognized as a problem, but would I? > >> What happens if you switch to "permissive mode" temporarily >> (either at boot time) or by running "setenforce 0" as root, then >> plug in the scanner? >> > > Did that, unplug scanner, run setenforce 0, plug in scanner and try > "xsane" again, same error, device not available. Is there a command > to verify it's actually switched to permissive? There's so much to > know! > > Is there something I need to enable under "Users and Groups" > possibly? I looked there but didn't see anything I recognized as > applicable? > > Bob > > getenforce I doubt there is a SELinux problem if this a happens in permissive mode. ausearch -m avc -ts recent -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk9HrZkACgkQrlYvE4MpobP2lgCfVTm5olovP3YKQKScW3ESIx0V qDcAnjI6c8+p1udWreC5IjIwuqL/MWe/ =JS0w -----END PGP SIGNATURE----- -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
