Since upgrade from sys-apps/pcsc-lite-1.8.24 to sys-apps/pcsc-lite-1.8.25-r1 yesterday, it is not possible anymore to use GnuPG card. When plugging in the usb device gets first owned by group pcscd and after some seconds reowned to group usb. But even adding pcscd to group usb does not help. It gets a step further but the device is not powered up so no access is possible. When running pcscd as root, it works fine. Reproducible: Always Steps to Reproduce: 1. Install pcsc-lite with openrc and start it 2. Plug in a GnuPG card. Actual Results: gpg --card-status gives an error Expected Results: gpg --card-status as well as all card access work. Portage 2.3.79 (python 3.6.9-final-0, default/linux/amd64/17.1/hardened, gcc-9.2.0, glibc-2.29-r7, 5.4.6-gentoo-x86_64 x86_64) ================================================================= System uname: Linux-5.4.6-gentoo-x86_64-x86_64-Intel-R-_Core-TM-2_Duo_CPU_L7500_@_1.60GHz-with-gentoo-2.6 KiB Mem: 8090132 total, 4937676 free KiB Swap: 2096476 total, 2096476 free Timestamp of repository gentoo: Tue, 07 Jan 2020 19:00:01 +0000 Head commit of repository gentoo: db5d2e228c73b63f88947245abfd54551985c3c6 Timestamp of repository Krontage: Sat, 04 Jan 2020 13:45:31 +0000 Head commit of repository Krontage: cf3fbc7efb8682c01045f96de8da401f063fa17f Timestamp of repository dlang: Mon, 06 Jan 2020 23:48:58 +0000 Head commit of repository dlang: 25bed8246cf300089491392e5f956f406bb289a4 Timestamp of repository flightsim: Tue, 26 Nov 2019 20:23:09 +0000 Head commit of repository flightsim: 77e6fd73453e32ec1404e21309dd48034e0d6e23 Timestamp of repository haskell: Tue, 07 Jan 2020 18:45:28 +0000 Head commit of repository haskell: 2178efd0279114583aa04d104ef824fe8aa90f06 Timestamp of repository laurentb: Mon, 30 Dec 2019 13:14:07 +0000 Head commit of repository laurentb: 7bcaebc44af327632e619299d644c1e1292482d5 Timestamp of repository perl-experimental: Wed, 11 Dec 2019 19:13:31 +0000 Head commit of repository perl-experimental: fe10c6f858e9e93f165c4437c7d4d59829f37b2b Timestamp of repository quarks: Mon, 30 Dec 2019 13:14:14 +0000 Head commit of repository quarks: ecf4092095988663da171ee58bde4a536bb7a9fd Timestamp of repository rion: Sun, 05 Jan 2020 14:26:54 +0000 Head commit of repository rion: 851acadd8a504484cc332309799596c36f783e26 Timestamp of repository tamiko: Mon, 30 Dec 2019 13:14:27 +0000 Head commit of repository tamiko: b110581f4c2ec25fc07c9a0ba7ce7c0e5b8cd76b sh dash 0.5.9.1-r3 ld GNU ld (Gentoo 2.32 p2) 2.32.0 distcc 3.3.3 x86_64-pc-linux-gnu [disabled] ccache version 3.7.4 [enabled] app-shells/bash: 4.4_p23-r1::gentoo dev-java/java-config: 2.2.0-r4::gentoo dev-lang/perl: 5.30.1::gentoo dev-lang/python: 2.7.17::gentoo, 3.6.9::gentoo dev-util/ccache: 3.7.4::gentoo dev-util/cmake: 3.14.6::gentoo dev-util/pkgconfig: 0.29.2::gentoo sys-apps/baselayout: 2.6-r1::gentoo sys-apps/openrc: 0.42.1::gentoo sys-apps/sandbox: 2.13::gentoo sys-devel/autoconf: 2.69-r4::gentoo sys-devel/automake: 1.11.6-r3::gentoo, 1.16.1-r1::gentoo sys-devel/binutils: 2.32-r1::gentoo sys-devel/gcc: 9.2.0-r2::gentoo sys-devel/gcc-config: 2.1::gentoo sys-devel/libtool: 2.4.6-r3::gentoo sys-devel/make: 4.2.1-r4::gentoo sys-kernel/linux-headers: 5.4::gentoo (virtual/os-headers) sys-libs/glibc: 2.29-r7::gentoo Repositories: gentoo location: /usr/portage sync-type: rsync sync-uri: rsync://rsync.gentoo.org/gentoo-portage priority: -1000 sync-rsync-verify-max-age: 24 sync-rsync-extra-opts: sync-rsync-verify-metamanifest: no sync-rsync-verify-jobs: 1 Krontage location: /var/db/repos/Krontage sync-type: git sync-uri: https://github.com/gentoo-mirror/Krontage.git masters: gentoo dlang location: /var/db/repos/dlang sync-type: git sync-uri: https://github.com/gentoo-mirror/dlang.git masters: gentoo flightsim location: /var/db/repos/flightsim sync-type: git sync-uri: https://github.com/gentoo-mirror/flightsim.git masters: gentoo haskell location: /var/db/repos/haskell sync-type: git sync-uri: https://github.com/gentoo-mirror/haskell.git masters: gentoo ket location: /home/ket-overlay masters: gentoo laurentb location: /var/db/repos/laurentb sync-type: git sync-uri: https://github.com/gentoo-mirror/laurentb.git masters: gentoo perl-experimental location: /var/db/repos/perl-experimental sync-type: git sync-uri: https://github.com/gentoo-mirror/perl-experimental.git masters: gentoo quarks location: /var/db/repos/quarks sync-type: git sync-uri: https://github.com/gentoo-mirror/quarks.git masters: gentoo rion location: /var/db/repos/rion sync-type: git sync-uri: https://github.com/gentoo-mirror/rion.git masters: gentoo tamiko location: /var/db/repos/tamiko sync-type: git sync-uri: https://github.com/gentoo-mirror/tamiko.git masters: gentoo ACCEPT_KEYWORDS="amd64" ACCEPT_LICENSE="@FREE" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-march=core2 -O2 -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/share/easy-rsa /usr/share/gnupg/qualified.txt" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c" CXXFLAGS="-march=core2 -O2 -pipe" DISTDIR="/usr/portage/distfiles" ENV_UNSET="DBUS_SESSION_BUS_ADDRESS DISPLAY GOBIN PERL5LIB PERL5OPT PERLPREFIX PERL_CORE PERL_MB_OPT PERL_MM_OPT XAUTHORITY XDG_CACHE_HOME XDG_CONFIG_HOME XDG_DATA_HOME XDG_RUNTIME_DIR" FCFLAGS="-O2 -pipe" FEATURES="assume-digests binpkg-docompress binpkg-dostrip binpkg-logs buildsyspkg ccache config-protect-if-modified distlocks ebuild-locks fixlafiles ipc-sandbox merge-sync multilib-strict network-sandbox news parallel-fetch pid-sandbox preserve-libs protect-owned sandbox sfperms strict suidctl unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr" FFLAGS="-O2 -pipe" GENTOO_MIRRORS="ftp://ftp.fau.de/gentoo" LANG="de_DE" LC_ALL="C" LDFLAGS="-Wl,-O1 -Wl,--as-needed" MAKEOPTS="-j2" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git" PORTAGE_TMPDIR="/var/tmp" USE="X acl alsa alsa-plugin amd64 bluetooth bzip2 caps crypt cxx glamor hardened iconv ipv6 jpeg libtirpc multilib ncurses nls nptl openmp oss pam pcre pcsc-lite pie png pulseaudio readline seccomp split-usr ssl ssp threads udev unicode vaapi vdpau xattr xtpax zlib zsh-completion" ABI_X86="64" ADA_TARGET="gnat_2018" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="karbon sheets words" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="mmx mmxext sse sse2" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock greis isync itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 timing tsip tripmate tnt ublox ubx" GRUB_PLATFORMS="pc" INPUT_DEVICES="evdev keyboard mouse wacom" KERNEL="linux" L10N="de de-1901 de-DE" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" NETBEANS_MODULES="apisupport cnd groovy gsf harness ide identity j2ee java mobility nb php profiler soa visualweb webcommon websvccommon xml" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php7-2" POSTGRES_TARGETS="postgres10 postgres11" PYTHON_SINGLE_TARGET="python3_6" PYTHON_TARGETS="python2_7 python3_6 pypy3" RUBY_TARGETS="ruby24 ruby25" USERLAND="GNU" VIDEO_CARDS="dummy fbdev i965 intel vesa" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: CC, CPPFLAGS, CTARGET, CXX, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LINGUAS, PORTAGE_BINHOST, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Hello! I have a few questions here: 1.) what is your output of the `pcscd -f -d -a` command 2.) is your regular user in the usb group? 3.) what dirvers do you have installed?
1. ~> pcscd -f -d -a 00000000 [140112731667328] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/debuglog.c:299:DebugLogSetLevel() debug level=debug 00000097 [140112731667328] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/debuglog.c:320:DebugLogSetCategory() Debug options: APDU 00000046 [140112731667328] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/pcscdaemon.c:481:main() file /run/pcscd/pcscd.comm already exists. 00000018 [140112731667328] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/pcscdaemon.c:483:main() Another pcscd (pid: 25066) seems to be running. Stopping pcscd service before: ~> pcscd -f -d -a 00000000 [140112731667328] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/debuglog.c:299:DebugLogSetLevel() debug level=debug 00000097 [140112731667328] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/debuglog.c:320:DebugLogSetCategory() Debug options: APDU 00000046 [140112731667328] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/pcscdaemon.c:481:main() file /run/pcscd/pcscd.comm already exists. 00000018 [140112731667328] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/pcscdaemon.c:483:main() Another pcscd (pid: 25066) seems to be running. chua: ?1 !11 ~> service pcscd stop * Stopping PC/SC Daemon ... [ ok ] chua: ?0 !12 ~> pcscd -f -d -a 00000000 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/debuglog.c:299:DebugLogSetLevel() debug level=debug 00000274 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/debuglog.c:320:DebugLogSetCategory() Debug options: APDU 00000268 [140127884934016] configfile.l:284:DBGetReaderListDir() Parsing conf directory: /etc/reader.conf.d 00000179 [140127884934016] configfile.l:320:DBGetReaderListDir() Skipping non regular file: . 00000131 [140127884934016] configfile.l:320:DBGetReaderListDir() Skipping non regular file: .. 00000126 [140127884934016] configfile.l:360:DBGetReaderList() Parsing conf file: /etc/reader.conf.d/ifd-gempc.conf 00000208 [140127884934016] configfile.l:210:evaluatetoken() Add reader: GemPC410 00000168 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/readerfactory.c:1074:RFInitializeReader() Attempting startup of GemPC410 00 00 using /usr/lib64/readers/usb/serial/libGemPC410.so.1.0.7 00000303 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/readerfactory.c:950:RFBindFunctions() Loading IFD Handler 3.0 00000170 [140127884934016] ifdhandler.c:51:IFDHCreateChannelByName() lun: 0, device: /dev/null 00000139 [140127884934016] gbpserial.c:328:OpenGBP() Lun: 0, device: /dev/null 00000177 [140127884934016] gbpserial.c:356:OpenGBP() tcflush() function error: Inappropriate ioctl for device 00000123 [140127884934016] gbpserial.c:361:OpenGBP() tcgetattr() function error: Inappropriate ioctl for device 00000128 [140127884934016] GemPC410Utils.c:31:OpenGemPC410ByName() OpenGBP failed 00000128 [140127884934016] ifdhandler.c:65:IFDHCreateChannelByName() OpenPort failed 00000140 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/readerfactory.c:1105:RFInitializeReader() Open Port 0x0 Failed (/dev/null) 00000133 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/readerfactory.c:376:RFAddReader() GemPC410 init failed. 00000123 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/readerfactory.c:610:RFRemoveReader() UnrefReader() count was: 1 00000133 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/readerfactory.c:1125:RFUnInitializeReader() Attempting shutdown of GemPC410 00 00. 00000120 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/readerfactory.c:987:RFUnloadReader() Unloading reader driver. 00000161 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/pcscdaemon.c:662:main() pcsc-lite 1.8.24 daemon ready. 00003655 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/hotplug_libudev.c:295:get_driver() Looking for a driver for VID: 0x1D6B, PID: 0x0001, path: /dev/bus/usb/003/001 00000339 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/hotplug_libudev.c:295:get_driver() Looking for a driver for VID: 0x1D6B, PID: 0x0001, path: /dev/bus/usb/003/001 00000331 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/hotplug_libudev.c:295:get_driver() Looking for a driver for VID: 0x0A5C, PID: 0x2110, path: /dev/bus/usb/003/003 00000286 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/hotplug_libudev.c:295:get_driver() Looking for a driver for VID: 0x0A5C, PID: 0x2110, path: /dev/bus/usb/003/003 00000285 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/hotplug_libudev.c:295:get_driver() Looking for a driver for VID: 0x0A5C, PID: 0x2110, path: /dev/bus/usb/003/003 00000280 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/hotplug_libudev.c:295:get_driver() Looking for a driver for VID: 0x0A5C, PID: 0x2110, path: /dev/bus/usb/003/003 00000349 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/hotplug_libudev.c:295:get_driver() Looking for a driver for VID: 0x1D6B, PID: 0x0001, path: /dev/bus/usb/004/001 00000318 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/hotplug_libudev.c:295:get_driver() Looking for a driver for VID: 0x1D6B, PID: 0x0002, path: /dev/bus/usb/001/001 00000331 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/hotplug_libudev.c:295:get_driver() Looking for a driver for VID: 0x1D6B, PID: 0x0001, path: /dev/bus/usb/005/001 00000299 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/hotplug_libudev.c:295:get_driver() Looking for a driver for VID: 0x1D6B, PID: 0x0001, path: /dev/bus/usb/005/001 00000281 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/hotplug_libudev.c:295:get_driver() Looking for a driver for VID: 0x08E6, PID: 0x3438, path: /dev/bus/usb/005/006 00000162 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/hotplug_libudev.c:436:HPAddDevice() Adding USB device: Gemalto USB Shell Token V2 00000195 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/readerfactory.c:1074:RFInitializeReader() Attempting startup of Gemalto USB Shell Token V2 (9C07A058) 00 00 using /usr/lib64/readers/usb/ifd-ccid.bundle/Contents/Linux/libccid.so 00000529 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/readerfactory.c:950:RFBindFunctions() Loading IFD Handler 3.0 00000164 [140127884934016] ifdhandler.c:1961:init_driver() Driver version: 1.4.30 00001250 [140127884934016] ifdhandler.c:1978:init_driver() LogLevel: 0x0003 00000148 [140127884934016] ifdhandler.c:1989:init_driver() DriverOptions: 0x0000 00000474 [140127884934016] ifdhandler.c:110:CreateChannelByNameOrChannel() Lun: 0, device: usb:08e6/3438:libudev:0:/dev/bus/usb/005/006 00000161 [140127884934016] ccid_usb.c:302:OpenUSBByName() Using: /usr/lib64/readers/usb/ifd-ccid.bundle/Contents/Info.plist 00001238 [140127884934016] ccid_usb.c:320:OpenUSBByName() ifdManufacturerString: Ludovic Rousseau (ludovic.rousseau@free.fr) 00000145 [140127884934016] ccid_usb.c:321:OpenUSBByName() ifdProductString: Generic CCID driver 00000172 [140127884934016] ccid_usb.c:322:OpenUSBByName() Copyright: This driver is protected by terms of the GNU Lesser General Public License version 2.1, or (at your option) any later version. 00004349 [140127884934016] ccid_usb.c:660:OpenUSBByName() Found Vendor/Product: 08E6/3438 (Gemalto USB Shell Token V2) 00000198 [140127884934016] ccid_usb.c:662:OpenUSBByName() Using USB bus/device: 5/6 00005162 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 12903 bps 00000017 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 25806 bps 00000011 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 51613 bps 00000022 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 103226 bps 00000010 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 206452 bps 00000010 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 412903 bps 00000009 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 825806 bps 00000009 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 154839 bps 00000018 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 258065 bps 00000010 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 17204 bps 00000009 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 34409 bps 00000009 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 68817 bps 00000010 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 137634 bps 00000009 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 275269 bps 00000018 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 550538 bps 00000010 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 172043 bps 00000022 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 24806 bps 00000011 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 49612 bps 00000009 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 99225 bps 00000009 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 198450 bps 00000013 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 396899 bps 00000009 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 74419 bps 00000009 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 124031 bps 00000009 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 86022 bps 00000012 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 38710 bps 00000010 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 64516 bps 00000009 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 20645 bps 00000010 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 41290 bps 00000009 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 82581 bps 00000009 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 165161 bps 00000017 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 30968 bps 00000013 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 18750 bps 00000009 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 37500 bps 00000009 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 75000 bps 00000021 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 150000 bps 00000020 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 300000 bps 00000020 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 600000 bps 00000020 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 112500 bps 00000020 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 187500 bps 00000019 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 25000 bps 00000020 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 50000 bps 00000019 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 100000 bps 00000020 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 200000 bps 00000019 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 400000 bps 00000020 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 125000 bps 00000020 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 56250 bps 00000020 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 93750 bps 00000019 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 62500 bps 00000020 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 28125 bps 00000019 [140127884934016] ccid_usb.c:1233:get_data_rates() declared: 46875 bps 00115282 [140127884934016] commands.c:1004:CmdEscapeCheck error on byte 10 00000019 [140127884934016] ccid.c:240:set_gemalto_firmware_features() GET_FIRMWARE_FEATURES failed: 612, len=0 00000013 [140127884934016] ifdhandler.c:381:IFDHGetCapabilities() tag: 0xFB3, usb:08e6/3438:libudev:0:/dev/bus/usb/005/006 (lun: 0) 00000017 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/readerfactory.c:396:RFAddReader() Using the reader polling thread 00002021 [140127884934016] ifdhandler.c:381:IFDHGetCapabilities() tag: 0xFAE, usb:08e6/3438:libudev:0:/dev/bus/usb/005/006 (lun: 0) 00000017 [140127884934016] ifdhandler.c:476:IFDHGetCapabilities() Reader supports 1 slot(s) 00000339 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/hotplug_libudev.c:295:get_driver() Looking for a driver for VID: 0x1D6B, PID: 0x0001, path: /dev/bus/usb/006/001 00000205 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/hotplug_libudev.c:295:get_driver() Looking for a driver for VID: 0x1D6B, PID: 0x0002, path: /dev/bus/usb/002/001 00000087 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/readerfactory.c:1409:RFWaitForReaderInit() Waiting init for reader: Gemalto USB Shell Token V2 (9C07A058) 00 00 00003284 [140127865816832] ifdhandler.c:1154:IFDHPowerICC() action: PowerUp, usb:08e6/3438:libudev:0:/dev/bus/usb/005/006 (lun: 0) 00006866 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/readerfactory.c:1409:RFWaitForReaderInit() Waiting init for reader: Gemalto USB Shell Token V2 (9C07A058) 00 00 00010204 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/readerfactory.c:1409:RFWaitForReaderInit() Waiting init for reader: Gemalto USB Shell Token V2 (9C07A058) 00 00 00010181 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/readerfactory.c:1409:RFWaitForReaderInit() Waiting init for reader: Gemalto USB Shell Token V2 (9C07A058) 00 00 00010168 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/readerfactory.c:1409:RFWaitForReaderInit() Waiting init for reader: Gemalto USB Shell Token V2 (9C07A058) 00 00 00010183 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/readerfactory.c:1409:RFWaitForReaderInit() Waiting init for reader: Gemalto USB Shell Token V2 (9C07A058) 00 00 00010171 [140127884934016] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/readerfactory.c:1409:RFWaitForReaderInit() Waiting init for reader: Gemalto USB Shell Token V2 (9C07A058) 00 00 00006269 [140127865816832] /var/tmp/portage/sys-apps/pcsc-lite-1.8.24/work/pcsc-lite-1.8.24/src/eventhandler.c:289:EHStatusHandlerThread() powerState: POWER_STATE_POWERED 00000080 [140127865816832] Card ATR: 3B DA 18 FF 81 B1 FE 75 1F 03 00 31 C5 73 C0 01 40 00 90 00 0C Note that this is the version 1.8.24 as I depending on a working GnuPG card. I got the ebuild from the git history of gentoo source. It would have helped if that would have remained in the official source. 2. No. But I even tried gpg --card-status as root and it didn't work too. 3. I do not understand that question. I do not use any driver. It is a gemalto usb stick/card reader. It just worked in the past with installed pcsc-lite.
Why do you file the bug against 1.8.25 but show 1.8.24 output?
> Why do you file the bug against 1.8.25 but show 1.8.24 output? Cause the 1.8.25 version is the broken one and after I filed the report I had to go back to 1.8.24 as I am depending on a working GnuPG setup (as I mentioned in my last comment)! I masked 1.8.25-r1 also.
(In reply to Klaus Ethgen from comment #4) > > Why do you file the bug against 1.8.25 but show 1.8.24 output? > Cause the 1.8.25 version is the broken one and after I filed the report I > had to go back to 1.8.24 as I am depending on a working GnuPG setup (as I > mentioned in my last comment)! > > I masked 1.8.25-r1 also. I asked you to provide outputs with version that does not work for you, providing outputs with working versions are pointless as they are working :), otherwise it is simoly unclear what exactly wrong.
I seems to have found the bug. One has to be sure that pcscd user is in group usb (which it isn't with the new package using acct-user/pcscd). The problem occur (as I already wrote) that the device (/dev/bus/usb/005/023) is first created with group pcscd and after just a second reowned by group usb. I think, udev does something really strange here. However, for completeness I'll upload the output of pcscd -f -d -a.
Created attachment 602930 [details] pcscd out
(In reply to Klaus Ethgen from comment #6) > I seems to have found the bug. One has to be sure that pcscd user is in > group usb (which it isn't with the new package using acct-user/pcscd). > > The problem occur (as I already wrote) that the device > (/dev/bus/usb/005/023) is first created with group pcscd and after just a > second reowned by group usb. I think, udev does something really strange > here. > > However, for completeness I'll upload the output of pcscd -f -d -a. The thing is that acct-* things only replace enewgroup/enewuser calls with pre-determined GID/UID, so I wonder how the older version worked for you if this is the case.
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=3c38b81acc906906dee1ad50600e795d97c1a101 commit 3c38b81acc906906dee1ad50600e795d97c1a101 Author: Mikle Kolyada <zlogene@gentoo.org> AuthorDate: 2020-01-10 21:13:52 +0000 Commit: Mikle Kolyada <zlogene@gentoo.org> CommitDate: 2020-01-10 21:14:14 +0000 acct-group/usb: initial commit Bug: https://bugs.gentoo.org/704946 Package-Manager: Portage-2.3.79, Repoman-2.3.16 Signed-off-by: Mikle Kolyada <zlogene@gentoo.org> acct-group/usb/metadata.xml | 8 ++++++++ acct-group/usb/usb-0.ebuild | 8 ++++++++ 2 files changed, 16 insertions(+)
Should be fixed.
I think I need to reopen that bug. But the error looks not that trivial as I thought before. The old pcscd worked reliable, that is known and did not change. But the new version does work "sometimes". When I want to use the GnuPG card, I have to restart pcscd often, kill the scdaemon or replugin the USB stick (with the card) to different ports until it work. I did not find a reliable way to make it work always. Maybe that has to do with the reowning part I described in the report earlier. It looks like a race condition when powering the card. What I seen is that, even that there is a running pcscd daemon via init.d, there is a udev rule to start the pcscd too. However, I think, the idea was to only start it when it is needed but that never worked.
Could you please provide more data? Otherwise it sounds like "roll a dice"
I think, that it is a conflict between the pcscd running as daemon and the one started by eudev when plugging in the device respective a race condition. Is there any way to see what eudev is doing exactly when plugging in the device? I have no idea what exactly eudev is doing in that case.
reopen if still happens to the never versions, I am using pcscd as the main gpg reader provider and it has been fine now for ages.
Please reopen, I have had this bug for some time (up to 1.9.9 now). gnupg seems to spawn its own pcscd process as I can list and edit card when pcscd-lite is stopped. I have both my user and pcscd added to usb group: > usb:x:85:joecool,pcscd udevadm monitor output (on plugging in yubikey4) yubioath-desktop works fine, gpg nonfunctional (as root or user) in this state. Plugging in also starts the pcscd initscript if I use udev and enable the hotplug option in rc.conf : KERNEL[12460.706101] add /devices/pci0000:00/0000:00:14.0/usb1/1-6 (usb) KERNEL[12460.708357] add /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0 (usb) KERNEL[12460.708816] add /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0/0003:1050:0407.0015 (hid) KERNEL[12460.708937] add /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0/0003:1050:0407.0015/input/input29 (input) KERNEL[12460.761908] add /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0/0003:1050:0407.0015/input/input29/input29::numlock (leds) KERNEL[12460.761964] change /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0/0003:1050:0407.0015/input/input29/input29::numlock (leds) KERNEL[12460.762007] add /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0/0003:1050:0407.0015/input/input29/input29::capslock (leds) KERNEL[12460.762045] change /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0/0003:1050:0407.0015/input/input29/input29::capslock (leds) KERNEL[12460.762075] add /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0/0003:1050:0407.0015/input/input29/input29::scrolllock (leds) KERNEL[12460.762102] change /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0/0003:1050:0407.0015/input/input29/input29::scrolllock (leds) KERNEL[12460.762127] add /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0/0003:1050:0407.0015/input/input29/input29::compose (leds) KERNEL[12460.762186] add /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0/0003:1050:0407.0015/input/input29/input29::kana (leds) KERNEL[12460.762221] change /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0/0003:1050:0407.0015/input/input29/input29::kana (leds) KERNEL[12460.762394] add /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0/0003:1050:0407.0015/input/input29/event18 (input) KERNEL[12460.762456] add /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0/0003:1050:0407.0015/hidraw/hidraw0 (hidraw) KERNEL[12460.762510] bind /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0/0003:1050:0407.0015 (hid) KERNEL[12460.762558] bind /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0 (usb) KERNEL[12460.762947] add /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.1 (usb) KERNEL[12460.763506] add /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.1/0003:1050:0407.0016 (hid) KERNEL[12460.763612] add /class/usbmisc (class) KERNEL[12460.763739] add /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.1/usbmisc/hiddev0 (usbmisc) KERNEL[12460.763852] add /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.1/0003:1050:0407.0016/hidraw/hidraw1 (hidraw) KERNEL[12460.763912] bind /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.1/0003:1050:0407.0016 (hid) KERNEL[12460.763946] bind /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.1 (usb) KERNEL[12460.764178] add /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.2 (usb) KERNEL[12460.764388] bind /devices/pci0000:00/0000:00:14.0/usb1/1-6 (usb) UDEV [12460.770740] add /class/usbmisc (class) UDEV [12460.787513] add /devices/pci0000:00/0000:00:14.0/usb1/1-6 (usb) UDEV [12460.790759] add /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.1 (usb) UDEV [12460.790939] add /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0 (usb) UDEV [12460.791721] add /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.2 (usb) UDEV [12460.793662] add /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.1/0003:1050:0407.0016 (hid) UDEV [12460.794217] add /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0/0003:1050:0407.0015 (hid) UDEV [12460.794664] add /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.1/usbmisc/hiddev0 (usbmisc) UDEV [12460.797253] add /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0/0003:1050:0407.0015/input/input29 (input) UDEV [12460.798777] add /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.1/0003:1050:0407.0016/hidraw/hidraw1 (hidraw) UDEV [12460.799567] add /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0/0003:1050:0407.0015/hidraw/hidraw0 (hidraw) UDEV [12460.801007] add /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0/0003:1050:0407.0015/input/input29/input29::numlock (leds) UDEV [12460.801521] add /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0/0003:1050:0407.0015/input/input29/input29::scrolllock (leds) UDEV [12460.801636] bind /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.1/0003:1050:0407.0016 (hid) UDEV [12460.802386] add /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0/0003:1050:0407.0015/input/input29/input29::compose (leds) UDEV [12460.802501] add /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0/0003:1050:0407.0015/input/input29/input29::capslock (leds) UDEV [12460.803226] add /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0/0003:1050:0407.0015/input/input29/input29::kana (leds) UDEV [12460.803816] change /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0/0003:1050:0407.0015/input/input29/input29::numlock (leds) UDEV [12460.804255] change /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0/0003:1050:0407.0015/input/input29/input29::scrolllock (leds) UDEV [12460.804825] bind /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.1 (usb) UDEV [12460.804948] change /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0/0003:1050:0407.0015/input/input29/input29::capslock (leds) UDEV [12460.805566] change /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0/0003:1050:0407.0015/input/input29/input29::kana (leds) UDEV [12460.813025] add /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0/0003:1050:0407.0015/input/input29/event18 (input) UDEV [12460.815263] bind /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0/0003:1050:0407.0015 (hid) UDEV [12460.817297] bind /devices/pci0000:00/0000:00:14.0/usb1/1-6/1-6:1.0 (usb) UDEV [12460.821512] bind /devices/pci0000:00/0000:00:14.0/usb1/1-6 (usb)
I think this should be documented in an ewarn for app-crypt/gnupg. I figured out the cause and a workaround through a lot of searching. This guy writes about it: https://ludovicrousseau.blogspot.com/2019/06/gnupg-and-pcsc-conflicts.html TL;DR: If you use stuff a yubikey (and their apps, which need pcsc-lite) and you want to use gpg for signing, need to add disable-ccid (and run 'gpgconf --kill scdaemon' after adding) to ~/.gnupg/scdaemon.conf, otherwise you have to pick one or the other to run at once.
user joecool requested this be reopened via IRC and they seem to have added additional information and a lead on a solution
More related reports: - https://github.com/LudovicRousseau/PCSC/issues/65 - https://bugzilla.redhat.com/show_bug.cgi?id=1941346 Ok so here's where I'm at with this: It is probably not a good idea to build gnupg with its own ccid support unless you really know what you're doing or it's being confined to something like initramfs usage. On a system using those other apps, they will use pcsc-lite usually. If gnupg is built without its internal ccid support, it will fallback to using pcsc-lite just fine with a usb smartcard reader. As a user right now if you hit this bug, you have 3 options: 1. Shut off pcsc-lite everytime you use gpg, and kill gpg-agent everytime you want to use pcsc-lite. (this is annoying situation I was in) 2. Add disable-ccid to $HOMEDIR/.gnupg/scdaemon.conf 3. Rebuild app-crypt/gnupg with -usb. app-crypt/gnupg maintainer suggestions: - change USE flag for app-crypt/gnupg to ccid as USB functions will work fine in the absence of it. - It might be good to put a RDEPEND on pcsc-lite if +smartcard -usb - ewarn when built with +smartcard +usb that disable-ccid should be added if intending to use with pcsc-lite. - ewarn when with +smartcard -usb that pcsc-lite should be installed and running in order to use smartcards.
