Package: libykpers-1-1
Version: 1.19.3-2
Followup-For: Bug #924787
Hi,
I'm having the same issue after upgrading to 1.19.3-2. The problem is in the
udev rules - in 1.19.3-2, the package switched from providing udev rules to
using the rules in libu2f-udev (source package libu2f-host). The relevant udev
rules provided in libu2f-udev are:
KERNEL=="hidraw*", SUBSYSTEM=="hidraw", ATTRS{idVendor}=="1050",
ATTRS{idProduct}=="0113|0114|0115|0116|0120|0200|0402|0403|0406|0407|0410",
TAG+="uaccess", GROUP="plugdev", MODE="0660"
It looks like the udev rules we need to allow the YubiKey to be used properly
need to have SUBSYSTEMS=="usb", as using this one works:
SUBSYSTEMS=="usb", ATTRS{idVendor}=="1050",
ATTRS{idProduct}=="0113|0114|0115|0116|0120|0200|0402|0403|0406|0407|0410",
TAG+="uaccess", GROUP="plugdev", MODE="0660"
Here are the old udev rules that were provided by libykpers
(https://salsa.debian.org/auth-team/yubikey-personalization/blob/ff35f76c2f533c224b1f64919d159c08f19ac598/70-yubikey.rules):
ACTION=="add|change", SUBSYSTEM=="usb", \
ATTRS{idVendor}=="1050",
ATTRS{idProduct}=="0010|0110|0111|0114|0116|0401|0403|0405|0407|0410", \
TEST=="/var/run/ConsoleKit/database", \
RUN+="udev-acl --action=$env{ACTION} --device=$env{DEVNAME}"
Here's the dump from udevadm info -q all:
looking at device
'/devices/pci0000:00/0000:00:14.0/usb2/2-12/2-12:1.0/0003:1050:0407.0036/input/input55':
KERNEL=="input55"
SUBSYSTEM=="input"
DRIVER==""
ATTR{properties}=="0"
ATTR{uniq}==""
ATTR{name}=="Yubico YubiKey OTP+FIDO+CCID"
ATTR{phys}=="usb-0000:00:14.0-12/input0"
looking at parent device
'/devices/pci0000:00/0000:00:14.0/usb2/2-12/2-12:1.0/0003:1050:0407.0036':
KERNELS=="0003:1050:0407.0036"
SUBSYSTEMS=="hid"
DRIVERS=="hid-generic"
ATTRS{country}=="00"
looking at parent device
'/devices/pci0000:00/0000:00:14.0/usb2/2-12/2-12:1.0':
KERNELS=="2-12:1.0"
SUBSYSTEMS=="usb"
DRIVERS=="usbhid"
ATTRS{supports_autosuspend}=="1"
ATTRS{bAlternateSetting}==" 0"
ATTRS{bInterfaceNumber}=="00"
ATTRS{bInterfaceClass}=="03"
ATTRS{bNumEndpoints}=="01"
ATTRS{authorized}=="1"
ATTRS{bInterfaceSubClass}=="01"
ATTRS{bInterfaceProtocol}=="01"
looking at parent device '/devices/pci0000:00/0000:00:14.0/usb2/2-12':
KERNELS=="2-12"
SUBSYSTEMS=="usb"
DRIVERS=="usb"
ATTRS{avoid_reset_quirk}=="0"
ATTRS{bMaxPacketSize0}=="64"
ATTRS{authorized}=="1"
ATTRS{urbnum}=="17"
ATTRS{tx_lanes}=="1"
ATTRS{idVendor}=="1050"
ATTRS{quirks}=="0x0"
ATTRS{configuration}==""
ATTRS{bDeviceSubClass}=="00"
ATTRS{maxchild}=="0"
ATTRS{bConfigurationValue}=="1"
ATTRS{speed}=="12"
ATTRS{bDeviceClass}=="00"
ATTRS{devnum}=="61"
ATTRS{devpath}=="12"
ATTRS{busnum}=="2"
ATTRS{manufacturer}=="Yubico"
ATTRS{ltm_capable}=="no"
ATTRS{bNumInterfaces}==" 3"
ATTRS{removable}=="removable"
ATTRS{bMaxPower}=="30mA"
ATTRS{bDeviceProtocol}=="00"
ATTRS{idProduct}=="0407"
ATTRS{product}=="YubiKey OTP+FIDO+CCID"
ATTRS{rx_lanes}=="1"
ATTRS{bNumConfigurations}=="1"
ATTRS{version}==" 2.00"
ATTRS{bmAttributes}=="80"
ATTRS{bcdDevice}=="0512"
Thanks,
Thomas.
-- System Information:
Debian Release: buster/sid
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.19.0-2-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE,
TAINT_UNSIGNED_MODULE
Locale: LANG=en_CA.utf8, LC_CTYPE=en_CA.utf8 (charmap=UTF-8),
LANGUAGE=en_CA.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages libykpers-1-1 depends on:
ii libc6 2.28-8
ii libjson-c3 0.12.1+ds-2
ii libusb-1.0-0 2:1.0.22-2
ii libyubikey0 1.13-4
Versions of packages libykpers-1-1 recommends:
ii libu2f-udev 1.1.9-1
libykpers-1-1 suggests no packages.
-- no debconf information
