Scan does not work on either F-16 box -

Daniel J Walsh dwalsh at redhat.com
Fri Feb 24 15:32:41 UTC 2012


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/24/2012 09:34 AM, Bob Goodwin wrote:
> On 24/02/12 08:50, Michael Schwendt wrote:
>> On Fri, 24 Feb 2012 07:16:43 -0500, BG (Bob) wrote:
>> 
>>> [bobg at box6 ~]$ getfacl /dev/bus/usb/001/006 getfacl: Removing
>>> leading '/' from absolute path names # file:
>>> dev/bus/usb/001/006 # owner: root # group: root user::rw- 
>>> group::rw- other::r--
>> The user access ACL entry is missing. That explains why your
>> ordinary user cannot access the device. (I assume that udev and
>> systemd work fine on your machine, or have you noticed issues
>> that might be relevant?)
>> 
>>> Do I need to chown bobg here? It looks like it ought to work
>>> as is for bobg with 664 ownership?
>> That won't survive a reboot, and when removing+readding the
>> device the problem would reappear.
>> 
>> Do you run with SELinux enabled and enforcing?
> 
> Yes
> 
>> Do you get denials in /var/log/audit/audit.log? (it could be that
>> XFCE doesn't run the SELinux troubleshooter, so you would not
>> learn about SELinux problems)
> 
> I don't get any SELinux warnings but then I don't know if that 
> function is working either. The log data is overwhelming! I see 
> nothing that seems to pertain to "sane." But I could have missed it
> ... I tried checking the end of the log immediately after xsane
> errored, saw nothing I recognized as a problem, but would I?
> 
>> What happens if you switch to "permissive mode" temporarily
>> (either at boot time) or by running "setenforce 0" as root, then
>> plug in the scanner?
>> 
> 
> Did that, unplug scanner, run setenforce 0, plug in scanner and try
> "xsane" again, same error, device not available. Is there a command
> to verify it's actually switched to permissive? There's so much to
> know!
> 
> Is there something I need to enable under "Users and Groups" 
> possibly? I looked there but didn't see anything I recognized as 
> applicable?
> 
> Bob
> 
> 
getenforce

I doubt there is a SELinux problem if this a happens in permissive mode.

ausearch -m avc -ts recent


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk9HrZkACgkQrlYvE4MpobP2lgCfVTm5olovP3YKQKScW3ESIx0V
qDcAnjI6c8+p1udWreC5IjIwuqL/MWe/
=JS0w
-----END PGP SIGNATURE-----


More information about the users mailing list