Bug 1195253 - mbpfan not starting after systemd hardenings were added
mbpfan not starting after systemd hardenings were added
Status: CONFIRMED
Classification: openSUSE
Product: openSUSE Tumbleweed
Classification: openSUSE
Component: Security
Current
Other Other
: P5 - None : Normal (vote)
: ---
Assigned To: Emanuel Castelo
E-mail List
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2022-01-28 07:17 UTC by Johannes Segitz
Modified: 2022-01-29 04:03 UTC (History)
1 user (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Johannes Segitz 2022-01-28 07:17:35 UTC
Information in bsc#1181400:
the package mbpfan had security hardening added, post hardening the service refused to start, i remarked out the added hardening and service again started normally, i am not sure where the issue arises with hardening added, mbpfan is a must for those of us who have MacBookPro's otherwise linux generally fries the machine

https://susepaste.org/64357756

-----

There's sr#949549 pending for this. I don't think it's ProtectKernelModules but ProtectKernelTunables, but I can't test it since I don't have the hardware. Can you please test the package in home:jsegitz:branches:hardware/mbpfan and give feedback?

Thanks
Comment 1 Luciano Santos 2022-01-29 02:50:51 UTC
I had the help of an old openSUSE contributor with an Apple box and it turns out that it really is "ProtectKernelTunables" the culprit here. And it makes sense because mbpfan probably needs write permission in some /sys/something/... to set the fan speed. I'm updating my request.
Comment 2 Emanuel Castelo 2022-01-29 03:58:42 UTC
mbpfan.conf teaks value here, /sys/devices/platform/applesmc.768/fan*_min"

i remarked out the  #ProtectKernelTunables=true and mbpfan.service starts normally , my hardware info included.

https://susepaste.org/54090876

thank you all for the fast response
Comment 3 Luciano Santos 2022-01-29 04:03:58 UTC
(In reply to Emanuel Castelo from comment #2)
> mbpfan.conf teaks value here, /sys/devices/platform/applesmc.768/fan*_min"
> 
> i remarked out the  #ProtectKernelTunables=true and mbpfan.service starts
> normally , my hardware info included.
> 
> https://susepaste.org/54090876
> 
> thank you all for the fast response

Thank you for the confirmation Emanuel C.