Relax permissions of usbguard configs

[marmarek]

They don't have any secrets, and having them root-only breaks building
initramfs as non-root.

QubesOS/qubes-issues#8206

[qubesos-bot]

OpenQA test summary

Complete test suite and dependencies: https://openqa.qubes-os.org/tests/overview?distri=qubesos&version=4.2&build=2023112905-4.2&flavor=pull-requests

New failures, excluding unstable

Compared to: https://openqa.qubes-os.org/tests/overview?distri=qubesos&version=4.2&build=2023071104-4.2&flavor=update

• system_tests_splitgpg

  • TC_10_Thunderbird_whonix-workstation-17: test_020_send_receive_inline_with_attachment (failure)
    dogtail.tree.SearchError: descendent of [application | Thunderbird]...

• system_tests_network_ipv6

  • VmIPv6Networking_debian-12-xfce: test_031_firewall_dynamic_block (failure)
    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^... AssertionError

Failed tests

3 failures

• system_tests_splitgpg

  • TC_10_Thunderbird_whonix-workstation-17: test_020_send_receive_inline_with_attachment (failure)
    dogtail.tree.SearchError: descendent of [application | Thunderbird]...

• system_tests_network_ipv6

  • VmIPv6Networking_debian-12-xfce: test_031_firewall_dynamic_block (failure)
    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^... AssertionError

• system_tests_basic_vm_qrexec_gui@hw1

  • [unstable] TC_20_NonAudio_whonix-gateway-17: test_300_bug_1028_gui_memory_pinning (failure)
    AssertionError: Dom0 window doesn't match VM window content, saved ...

Fixed failures

Compared to: https://openqa.qubes-os.org/tests/77326#dependencies

23 fixed

• system_tests_whonix

  • whonixcheck: fail (unknown)
    Whonixcheck for anon-whonix failed...

  • whonixcheck: unnamed test (unknown)

  • whonixcheck: unnamed test (unknown)

• system_tests_network

  • VmNetworking_debian-11: test_203_fake_ip_inter_vm_allow (error)
    qubes.exc.QubesMemoryError: Not enough memory to start domain 'test...

• system_tests_splitgpg

  • TC_00_Direct_fedora-38: test_081_subpacket_options (error)
    qubes.exc.QubesMemoryError: Not enough memory to start domain 'test...

  • TC_10_Thunderbird_whonix-ws-16: test_020_send_receive_inline_with_attachment (failure)
    dogtail.tree.SearchError: descendent of [application | Thunderbird]...

  • TC_20_Evolution_debian-11: test_000_send_receive_signed_encrypted (failure)
    assert msg_body.strip() == 'This is test message'... AssertionError

• system_tests_manager

  • VMSettingsTest: test_26_default_dispvm (failure)
    self.assertTrue(self.vm.property_... AssertionError: False is not true

• system_tests_qrexec

  • TC_00_Qrexec_whonix-gw-16: test_055_qrexec_dom0_service_abort (failure)
    AssertionError: Timeout, probably stdout wasn't closed

  • TC_00_Qrexec_whonix-ws-16: test_091_qrexec_service_socket_dom0_send (failure)
    AssertionError: service timeout, probably EOF wasn't transferred to...

• system_tests_network_ipv6

  • VmIPv6Networking_fedora-38: test_040_inter_vm (error)
    qubes.exc.QubesMemoryError: Not enough memory to start domain 'test...

  • VmIPv6Networking_fedora-38: test_203_fake_ip_inter_vm_allow (error)
    qubes.exc.QubesMemoryError: Not enough memory to start domain 'test...

• system_tests_dispvm

  • TC_20_DispVM_debian-11: test_030_edit_file (failure + cleanup)
    AssertionError: Timeout while waiting for disp[0-9]* window to show

  • TC_20_DispVM_debian-11: test_100_open_in_dispvm (failure + cleanup)
    AssertionError: Timeout while waiting for disp[0-9]* window to show

  • TC_20_DispVM_fedora-38: test_010_simple_dvm_run (failure)
    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^... AssertionError

  • TC_20_DispVM_fedora-38: test_030_edit_file (failure + cleanup)
    AssertionError: Timeout while waiting for disp[0-9]* window to show

  • TC_20_DispVM_fedora-38: test_100_open_in_dispvm (failure + cleanup)
    AssertionError: Timeout while waiting for disp[0-9]* window to show

  • TC_20_DispVM_whonix-gw-16: test_010_simple_dvm_run (skipped + cleanup)

  • TC_20_DispVM_whonix-gw-16: test_020_gui_app (skipped + cleanup)

  • TC_20_DispVM_whonix-gw-16: test_030_edit_file (skipped + cleanup)

  • TC_20_DispVM_whonix-gw-16: test_100_open_in_dispvm (skipped + cleanup)

  • TC_20_DispVM_whonix-ws-16: test_010_simple_dvm_run (failure)
    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^... AssertionError

• system_tests_guivm_gui_interactive

  • update_templates: Failed (test died)
    # Test died: command 'curl --form upload=@template-fedora-38-xfce-v...

Unstable tests

• system_tests_whonix

  whonix_torbrowser/ (1/5 times with errors)

  • job 84081 None
  whonix_torbrowser/ (1/5 times with errors)

  • job 84081 None
  whonix_torbrowser/Failed (1/5 times with errors)

  • job 84081 # Test died: no candidate needle with tag(s) 'desktop-clear' matche...

• system_tests_basic_vm_qrexec_gui

  TC_20_AudioVM_Pulse_debian-12-xfce/test_220_audio_play_pulseaudio (1/5 times with errors)

  • job 86091 AssertionError: Command 'paplay --format=float32le --rate=44100 --c...
  TC_20_NonAudio_whonix-gateway-17/test_300_bug_1028_gui_memory_pinning (2/5 times with errors)

  • job 85314 AssertionError: Dom0 window doesn't match VM window content, saved ...
  • job 86091 AssertionError: Dom0 window doesn't match VM window content, saved ...

• system_tests_splitgpg

  TC_10_Thunderbird_debian-12-xfce/test_000_send_receive_default (1/5 times with errors)

  • job 84710 dogtail.tree.SearchError: descendent of [application | Thunderbird]...
  TC_10_Thunderbird_fedora-38-xfce/test_000_send_receive_default (2/5 times with errors)

  • job 84710 dogtail.tree.SearchError: descendent of [application | Thunderbird]...
  • job 85646 Exception: Failed to send message with error 'unknown'
  TC_10_Thunderbird_whonix-workstation-17/test_000_send_receive_default (1/5 times with errors)

  • job 84710 dogtail.tree.SearchError: descendent of [application | Thunderbird]...
  TC_10_Thunderbird_debian-12-xfce/test_010_send_receive_inline_signed_only (1/5 times with errors)

  • job 84710 dogtail.tree.SearchError: descendent of [application | Thunderbird]...
  TC_10_Thunderbird_fedora-38-xfce/test_010_send_receive_inline_signed_only (1/5 times with errors)

  • job 84710 dogtail.tree.SearchError: descendent of [application | Thunderbird]...
  TC_10_Thunderbird_whonix-workstation-17/test_010_send_receive_inline_signed_only (1/5 times with errors)

  • job 84710 dogtail.tree.SearchError: descendent of [application | Thunderbird]...
  TC_10_Thunderbird_debian-12-xfce/test_020_send_receive_inline_with_attachment (2/5 times with errors)

  • job 84710 dogtail.tree.SearchError: descendent of [application | Thunderbird]...
  • job 85328 Exception: Failed to send message with error 'unknown'
  TC_10_Thunderbird_fedora-38-xfce/test_020_send_receive_inline_with_attachment (3/5 times with errors)

  • job 84710 dogtail.tree.SearchError: descendent of [application | Thunderbird]...
  • job 85117 Exception: Failed to send message with error 'unknown'
  • job 86105 Exception: Failed to send message with error 'unknown'

• system_tests_usbproxy

  TC_20_USBProxy_core3_debian-12-xfce/test_070_attach_not_installed_front (1/5 times with errors)

  • job 85091 qubesusbproxy.core3ext.QubesUSBException: Device attach failed: 202...
  TC_20_USBProxy_core3_whonix-gateway-17/test_070_attach_not_installed_front (1/5 times with errors)

  • job 85302 qubesusbproxy.core3ext.QubesUSBException: Device attach failed: 202...
  TC_20_USBProxy_core3_whonix-workstation-17/test_070_attach_not_installed_front (1/5 times with errors)

  • job 84684 qubesusbproxy.core3ext.QubesUSBException: Device attach failed: 202...

• system_tests_devices

  TC_00_List_debian-12-xfce/test_001_list_loop_mounted (3/5 times with errors)

  • job 84700 AssertionError: Device test-inst-vm:loop0 (/tmp/test.img) should no...
  • job 85318 AssertionError: Device test-inst-vm:loop0 (/tmp/test.img) should no...
  • job 85636 AssertionError: Device test-inst-vm:loop0 (/tmp/test.img) should no...

• system_tests_whonix@hw1

  whonix_torbrowser/ (1/5 times with errors)

  • job 84081 None
  whonix_torbrowser/ (1/5 times with errors)

  • job 84081 None
  whonix_torbrowser/Failed (1/5 times with errors)

  • job 84081 # Test died: no candidate needle with tag(s) 'desktop-clear' matche...

• system_tests_basic_vm_qrexec_gui_zfs

  TC_00_Basic/test_120_start_standalone_with_cdrom_dom0 (1/5 times with errors)

  • job 85304 AssertionError: 1 != 0 : b'Timeout waiting for dom0:loop4 device to...
  TC_20_AudioVM_Pulse_debian-12-xfce-pool/test_220_audio_play_pulseaudio (1/5 times with errors)

  • job 84686 AssertionError: Command 'paplay --format=float32le --rate=44100 --c...
  TC_20_AudioVM_Pulse_debian-12-xfce-pool/test_223_audio_play_hvm (1/5 times with errors)

  • job 85622 AssertionError: too short audio, expected 10s, got 9.35730158730158...

• system_tests_basic_vm_qrexec_gui_ext4

  TC_20_AudioVM_Pulse_debian-12-xfce-pool/test_222_audio_rec_unmuted_pulseaudio (1/5 times with errors)

  • job 85648 qubes.exc.QubesVMError: Failed to attach audio input from dom0 to t...

• system_tests_basic_vm_qrexec_gui_xfs

  TC_20_NonAudio_whonix-gateway-17-pool/test_300_bug_1028_gui_memory_pinning (1/5 times with errors)

  • job 86094 AssertionError: Dom0 window doesn't match VM window content, saved ...

• system_tests_basic_vm_qrexec_gui@hw1

  TC_20_AudioVM_Pulse_debian-12-xfce/test_220_audio_play_pulseaudio (1/5 times with errors)

  • job 86091 AssertionError: Command 'paplay --format=float32le --rate=44100 --c...
  TC_20_NonAudio_whonix-gateway-17/test_300_bug_1028_gui_memory_pinning (2/5 times with errors)

  • job 85314 AssertionError: Dom0 window doesn't match VM window content, saved ...
  • job 86091 AssertionError: Dom0 window doesn't match VM window content, saved ...