#1121885 fancontrol: with PrivateDevices /dev/fan-p6/pwm1 become not available

#1121885#5
Date:
2025-12-04 07:51:15 UTC
From:
To:
Dear Maintainer,

On helios64, UDEV rules create /dev/fan-p6/pwm1 and /dev/fan-p7/pwm1 and
the systemd configuration file restrict access to /dev with directive
"PrivateDevices=yes"

Please remove thes PrivateDevices line from /usr/lib/systemd/system/fancontrol.service.

Sample log of failed start service :

```
fancontrol[34841]: Error: file /dev/fan-p6/pwm1 doesn't exist or isn't writable
fancontrol[34841]: Error: file /dev/fan-p7/pwm1 doesn't exist or isn't writable
fancontrol[34841]: Error: file /dev/thermal-cpu/temp1_input doesn't exist or isn't readable
fancontrol[34841]: Error: file /dev/thermal-cpu/temp1_input doesn't exist or isn't readable
fancontrol[34841]: At least one referenced file is missing or doesn't have
fancontrol[34841]: correct privileges. Either some required kernel
fancontrol[34841]: modules haven't been loaded, or your configuration file is outdated.
fancontrol[34841]: In the latter case, you should run pwmconfig again.
systemd[1]: fancontrol.service: Main process exited, code=exited, status=1/FAILURE
systemd[1]: fancontrol.service: Failed with result 'exit-code'.
```

#1121885#10
Date:
2025-12-05 05:35:09 UTC
From:
To:
Hi,

This is appears to be due to a specific helios64 udev rule, this is not
supposed to be the place where hwmon devices are located.

Removing that would decrease the hardening for standard debian
installations. If the symlinks can't be moved outside of /dev, helios64
should ship an overlay file for the fancontrol service.

Regards
Aurelien

#1121885#15
Date:
2025-12-07 22:46:04 UTC
From:
To:
Hi,

By default hwmon devices are controlled from /sys. /sys/class/hwmon is
contains symlinks to the actual hwmon devices, I guess extra ones can
be created in that directory.

Regards
Aurelien