Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-941

usbguard tries to access non-existent device path

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: Generate New Ti...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Not a Bug
    • Icon: Undefined Undefined
    • None
    • rhel-9.1.0
    • usbguard
    • None
    • None
    • rhel-security-special-projects
    • ssg_security
    • None
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • Release Note Not Required
    • None
    • 57,005

      Description of problem:
      Usbguard tries to access non-existent device path during the system boot.

      Version-Release number of selected component (if applicable):
      usbguard-1.0.0-12.el9.x86_64
      usbguard-1.0.0-8.el8_7.2.x86_64

      How reproducible:
      100% at least in the libvirt VM

      Steps to Reproduce:
      1. systemctl enable usbguard
      2. reboot
      3. journalctl -u usbguard

      Actual results:
      Nov 30 13:17:03 sopos-rhel9-brq systemd[1]: Starting USBGuard daemon...
      Nov 30 13:17:04 sopos-rhel9-brq systemd[1]: Started USBGuard daemon.
      Nov 30 13:17:04 sopos-rhel9-brq usbguard-daemon[745]: uid=0 pid=740 result='SUCCESS' device.rule='allow id 1d6b:0002 serial "0000:02:00.0" name "xHCI Host Controller" hash "4+i1fOQzh6/Cdbdfiwr>
      Nov 30 13:17:04 sopos-rhel9-brq usbguard-daemon[745]: uid=0 pid=740 result='SUCCESS' device.system_name='/devices/pci0000:00/0000:00:02.1/0000:02:00.0/usb1' target.new='allow' device.rule='all>
      Nov 30 13:17:04 sopos-rhel9-brq usbguard-daemon[745]: uid=0 pid=740 result='SUCCESS' device.rule='allow id 1d6b:0003 serial "0000:02:00.0" name "xHCI Host Controller" hash "kMlilF7kSjfNYbDD2q8>
      Nov 30 13:17:04 sopos-rhel9-brq usbguard-daemon[745]: uid=0 pid=740 result='SUCCESS' device.system_name='/devices/pci0000:00/0000:00:02.1/0000:02:00.0/usb2' target.new='allow' device.rule='all>
      Nov 30 13:17:04 sopos-rhel9-brq usbguard-daemon[745]: uid=0 pid=740 result='SUCCESS' device.rule='allow id 0627:0001 serial "28754-0000:00:02.1:00.0-1" name "QEMU USB Tablet" hash "9f6ZIqpK5OG>
      Nov 30 13:17:04 sopos-rhel9-brq usbguard-daemon[745]: uid=0 pid=740 result='SUCCESS' device.system_name='/devices/pci0000:00/0000:00:02.1/0000:02:00.0/usb1/1-1' target.new='block' device.rule=>
      Nov 30 13:17:04 sopos-rhel9-brq usbguard-daemon[745]: Cannot resolve realpath for /sys/bus/usb/devices/../../../devices/pci0000:00/0000:00:02.1/0000:02:00.0/usb1/1-1/1-1:1.0
      Nov 30 13:17:04 sopos-rhel9-brq usbguard-daemon[745]: Ignoring unknown UEvent action: sysfs_devpath=/devices/pci0000:00/0000:00:02.1/0000:02:00.0/usb1/1-1 action=change

      Expected results:
      no attempt to access non-existent path logged

      Additional info:
      the last path component does not exist
      [root@sopos-rhel9-brq ~]# ls -l /sys/devices/pci0000:00/0000:00:02.1/0000:02:00.0/usb1/1-1/
      total 0
      rw-rr-. 1 root root 4096 Nov 30 13:17 authorized
      rw-rr-. 1 root root 4096 Nov 30 13:27 avoid_reset_quirk
      rrr-. 1 root root 4096 Nov 30 13:16 bcdDevice
      rw-rr-. 1 root root 4096 Nov 30 13:27 bConfigurationValue
      rrr-. 1 root root 4096 Nov 30 13:16 bDeviceClass
      rrr-. 1 root root 4096 Nov 30 13:27 bDeviceProtocol
      rrr-. 1 root root 4096 Nov 30 13:27 bDeviceSubClass
      rrr-. 1 root root 4096 Nov 30 13:27 bmAttributes
      rrr-. 1 root root 4096 Nov 30 13:27 bMaxPacketSize0
      rrr-. 1 root root 4096 Nov 30 13:27 bMaxPower
      rrr-. 1 root root 4096 Nov 30 13:27 bNumConfigurations
      rrr-. 1 root root 4096 Nov 30 13:27 bNumInterfaces
      rrr-. 1 root root 4096 Nov 30 13:27 busnum
      rrr-. 1 root root 4096 Nov 30 13:27 configuration
      rrr-. 1 root root 65553 Nov 30 13:16 descriptors
      rrr-. 1 root root 4096 Nov 30 13:27 dev
      rrr-. 1 root root 4096 Nov 30 13:27 devnum
      rrr-. 1 root root 4096 Nov 30 13:27 devpath
      lrwxrwxrwx. 1 root root 0 Nov 30 13:16 driver -> ../../../../../../bus/usb/drivers/usb
      drwxr-xr-x. 3 root root 0 Nov 30 13:25 ep_00
      rrr-. 1 root root 4096 Nov 30 13:16 idProduct
      rrr-. 1 root root 4096 Nov 30 13:16 idVendor
      rrr-. 1 root root 4096 Nov 30 13:27 ltm_capable
      rrr-. 1 root root 4096 Nov 30 13:16 manufacturer
      rrr-. 1 root root 4096 Nov 30 13:27 maxchild
      lrwxrwxrwx. 1 root root 0 Nov 30 13:17 port -> ../1-0:1.0/usb1-port1
      drwxr-xr-x. 2 root root 0 Nov 30 13:16 power
      rrr-. 1 root root 4096 Nov 30 13:16 product
      rrr-. 1 root root 4096 Nov 30 13:27 quirks
      rrr-. 1 root root 4096 Nov 30 13:27 removable
      -w------. 1 root root 4096 Nov 30 13:27 remove
      rrr-. 1 root root 4096 Nov 30 13:27 rx_lanes
      rrr-. 1 root root 4096 Nov 30 13:16 serial
      rrr-. 1 root root 4096 Nov 30 13:27 speed
      lrwxrwxrwx. 1 root root 0 Nov 30 13:16 subsystem -> ../../../../../../bus/usb
      rrr-. 1 root root 4096 Nov 30 13:27 tx_lanes
      rw-rr-. 1 root root 4096 Nov 30 13:16 uevent
      rrr-. 1 root root 4096 Nov 30 13:27 urbnum
      rrr-. 1 root root 4096 Nov 30 13:27 version

              rh-ee-alakatos Attila Lakatos
              dapospis@redhat.com Dalibor Pospíšil
              Attila Lakatos Attila Lakatos
              SSG Security QE SSG Security QE
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: