-
Bug
-
Resolution: Not a Bug
-
Undefined
-
None
-
rhel-9.1.0
-
None
-
None
-
rhel-security-special-projects
-
ssg_security
-
None
-
False
-
False
-
-
None
-
None
-
None
-
None
-
Release Note Not Required
-
-
Unspecified
-
None
-
57,005
Description of problem:
Usbguard tries to access non-existent device path during the system boot.
Version-Release number of selected component (if applicable):
usbguard-1.0.0-12.el9.x86_64
usbguard-1.0.0-8.el8_7.2.x86_64
How reproducible:
100% at least in the libvirt VM
Steps to Reproduce:
1. systemctl enable usbguard
2. reboot
3. journalctl -u usbguard
Actual results:
Nov 30 13:17:03 sopos-rhel9-brq systemd[1]: Starting USBGuard daemon...
Nov 30 13:17:04 sopos-rhel9-brq systemd[1]: Started USBGuard daemon.
Nov 30 13:17:04 sopos-rhel9-brq usbguard-daemon[745]: uid=0 pid=740 result='SUCCESS' device.rule='allow id 1d6b:0002 serial "0000:02:00.0" name "xHCI Host Controller" hash "4+i1fOQzh6/Cdbdfiwr>
Nov 30 13:17:04 sopos-rhel9-brq usbguard-daemon[745]: uid=0 pid=740 result='SUCCESS' device.system_name='/devices/pci0000:00/0000:00:02.1/0000:02:00.0/usb1' target.new='allow' device.rule='all>
Nov 30 13:17:04 sopos-rhel9-brq usbguard-daemon[745]: uid=0 pid=740 result='SUCCESS' device.rule='allow id 1d6b:0003 serial "0000:02:00.0" name "xHCI Host Controller" hash "kMlilF7kSjfNYbDD2q8>
Nov 30 13:17:04 sopos-rhel9-brq usbguard-daemon[745]: uid=0 pid=740 result='SUCCESS' device.system_name='/devices/pci0000:00/0000:00:02.1/0000:02:00.0/usb2' target.new='allow' device.rule='all>
Nov 30 13:17:04 sopos-rhel9-brq usbguard-daemon[745]: uid=0 pid=740 result='SUCCESS' device.rule='allow id 0627:0001 serial "28754-0000:00:02.1:00.0-1" name "QEMU USB Tablet" hash "9f6ZIqpK5OG>
Nov 30 13:17:04 sopos-rhel9-brq usbguard-daemon[745]: uid=0 pid=740 result='SUCCESS' device.system_name='/devices/pci0000:00/0000:00:02.1/0000:02:00.0/usb1/1-1' target.new='block' device.rule=>
Nov 30 13:17:04 sopos-rhel9-brq usbguard-daemon[745]: Cannot resolve realpath for /sys/bus/usb/devices/../../../devices/pci0000:00/0000:00:02.1/0000:02:00.0/usb1/1-1/1-1:1.0
Nov 30 13:17:04 sopos-rhel9-brq usbguard-daemon[745]: Ignoring unknown UEvent action: sysfs_devpath=/devices/pci0000:00/0000:00:02.1/0000:02:00.0/usb1/1-1 action=change
Expected results:
no attempt to access non-existent path logged
Additional info:
the last path component does not exist
[root@sopos-rhel9-brq ~]# ls -l /sys/devices/pci0000:00/0000:00:02.1/0000:02:00.0/usb1/1-1/
total 0
rw-rr-. 1 root root 4096 Nov 30 13:17 authorized
rw-rr-. 1 root root 4096 Nov 30 13:27 avoid_reset_quirk
rrr-. 1 root root 4096 Nov 30 13:16 bcdDevice
rw-rr-. 1 root root 4096 Nov 30 13:27 bConfigurationValue
rrr-. 1 root root 4096 Nov 30 13:16 bDeviceClass
rrr-. 1 root root 4096 Nov 30 13:27 bDeviceProtocol
rrr-. 1 root root 4096 Nov 30 13:27 bDeviceSubClass
rrr-. 1 root root 4096 Nov 30 13:27 bmAttributes
rrr-. 1 root root 4096 Nov 30 13:27 bMaxPacketSize0
rrr-. 1 root root 4096 Nov 30 13:27 bMaxPower
rrr-. 1 root root 4096 Nov 30 13:27 bNumConfigurations
rrr-. 1 root root 4096 Nov 30 13:27 bNumInterfaces
rrr-. 1 root root 4096 Nov 30 13:27 busnum
rrr-. 1 root root 4096 Nov 30 13:27 configuration
rrr-. 1 root root 65553 Nov 30 13:16 descriptors
rrr-. 1 root root 4096 Nov 30 13:27 dev
rrr-. 1 root root 4096 Nov 30 13:27 devnum
rrr-. 1 root root 4096 Nov 30 13:27 devpath
lrwxrwxrwx. 1 root root 0 Nov 30 13:16 driver -> ../../../../../../bus/usb/drivers/usb
drwxr-xr-x. 3 root root 0 Nov 30 13:25 ep_00
rrr-. 1 root root 4096 Nov 30 13:16 idProduct
rrr-. 1 root root 4096 Nov 30 13:16 idVendor
rrr-. 1 root root 4096 Nov 30 13:27 ltm_capable
rrr-. 1 root root 4096 Nov 30 13:16 manufacturer
rrr-. 1 root root 4096 Nov 30 13:27 maxchild
lrwxrwxrwx. 1 root root 0 Nov 30 13:17 port -> ../1-0:1.0/usb1-port1
drwxr-xr-x. 2 root root 0 Nov 30 13:16 power
rrr-. 1 root root 4096 Nov 30 13:16 product
rrr-. 1 root root 4096 Nov 30 13:27 quirks
rrr-. 1 root root 4096 Nov 30 13:27 removable
-w------. 1 root root 4096 Nov 30 13:27 remove
rrr-. 1 root root 4096 Nov 30 13:27 rx_lanes
rrr-. 1 root root 4096 Nov 30 13:16 serial
rrr-. 1 root root 4096 Nov 30 13:27 speed
lrwxrwxrwx. 1 root root 0 Nov 30 13:16 subsystem -> ../../../../../../bus/usb
rrr-. 1 root root 4096 Nov 30 13:27 tx_lanes
rw-rr-. 1 root root 4096 Nov 30 13:16 uevent
rrr-. 1 root root 4096 Nov 30 13:27 urbnum
rrr-. 1 root root 4096 Nov 30 13:27 version
- external trackers