[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#795296: "You are not allowed to save the configuration" (both root and ordinary user)

Hi Maxy!

> El 2017-03-22 a las 19:52 +0100, Willi Mann escribió:
>> Am 2017-03-21 um 10:58 schrieb Maximiliano Curia:
>>> El 2017-03-20 a las 19:22 +0100, Willi Mann escribió:
>>>> the problem still exists. Let me know if you any idea how to track
>>>> this down.
> 
>>> Sorry, I can't reproduce the issue here, the message seems to be
>>> related to a rule rejecting the request for your users, (even root?).
>>> Do you have a specific policykit setup?
> 
>> I don't have a specific setup. The system runs testing for some years,
>> though. So it could be an upgrade bug. The problem also occurs with
>> root and a clean account I just created for testing.
> 
> There is something here, as root policykit doesn't need to talk with the
> agent, so that rules out polkit-kde-agent-1. The issue should be on the
> policykit side.

> Just to be sure, how was the root plasma session started?

did

% su
# export $(dbus-launch)
# systemsettings5

in the SDDM settings window, it tells me the same as when I try it as
ordinary user (I'm not allowed to save the configuration, transl. from
German).

> The changes made as root weren't applied to the /etc/sddm.conf file?

Unfortunately not.

> (assuming that you tested this with the sddm kcm)
> 
>>> Do you have the polkit-kde-authentication-agent-1 service running?
> 
>> I have such a process running, under the desktop's user uid.
> 
>>> What's the result of running: pkexec bash in a terminal with your user?
> 
>> This hangs, i.e. it does not return but also does not produce any
>> output. However, it works fine when I run "pkexec bash" as root.
>> System dbus log during the execution of this command attached.
> 
> pkexec bash as root doesn't need to talk with the agent, so it should
> always work.
> 
>> method call time=1490208186.877616 sender=:1.73 -> destination=:1.7
>> serial=9 path=/org/freedesktop/PolicyKit1/Authority;
>> interface=org.freedesktop.PolicyKit1.Authority;
>> member=CheckAuthorization   string "org.freedesktop.policykit.exec"  
>> array [      dict entry(         string "program"         string
>> "/bin/bash"      ) method call time=1490208186.878006 sender=:1.7 ->
>> destination=org.freedesktop.DBus serial=139
>> path=/org/freedesktop/DBus; interface=org.freedesktop.DBus;
>> member=GetConnectionUnixUser   string ":1.73" method return
>> time=1490208186.878028 sender=org.freedesktop.DBus -> destination=:1.7
>> serial=78 reply_serial=139   uint32 0 method call
>> time=1490208186.878052 sender=:1.7 -> destination=org.freedesktop.DBus
>> serial=140 path=/org/freedesktop/DBus; interface=org.freedesktop.DBus;
>> member=GetConnectionUnixProcessID   string ":1.73" method return
>> time=1490208186.878076 sender=org.freedesktop.DBus -> destination=:1.7
>> serial=79 reply_serial=140   uint32 2828 method call
>> time=1490208186.878100 sender=:1.7 -> destination=:1.42 serial=141
>> path=/org/kde/PolicyKit1/AuthenticationAgent;
>> interface=org.freedesktop.PolicyKit1.AuthenticationAgent;
>> member=BeginAuthentication   string "org.freedesktop.policykit.exec"  
>> string "Authentication is needed to run `/bin/bash' as the super user"
>>   string ""   array [      dict entry(         string
>> "polkit.caller-pid"         string "2828"      ) signal
>> time=1490208211.280956 sender=:1.28 -> destination=(null destination)
>> serial=41 path=/org/freedesktop/ConsoleKit/Session4;
>> interface=org.freedesktop.ConsoleKit.Session; member=IdleHintChanged  
>> boolean true
> 
> After these the agent request an EnumerateActions and ends up showing
> the window, in my test system. This may indicate that the agent is in a
> non-responsive state, which somewhat contradicts what's indicated a
> couple of paragraphs before. Was this the complete output?

Yes, there is nothing more until I hit Ctrl+C to kill the hanging pkexec
bash command.

> It might be useful to attach an strace to the agent with:
> sudo strace -vf -p $(pidof polkit-kde-authentication-agent-1) | tee
> /tmp/polkit-agent.log
> 
> or something like that. The generated file would be quite large, with a
> lot of noise, so it might be better not to send it to a pastebin like
> https://paste.debian.net.

The file has 12 KB, so I'm attaching it to this mail. The command I ran was

# strace -o /tmp/polkit-agent.log -vf -p $(pidof
polkit-kde-authentication-agent-1)

I started it before executing pkexec bash and stopped it with Ctrl+C
after I Ctrl+Ced the pkexec command.

Willi

2523  restart_syscall(<... resuming interrupted restart_syscall ...> <unfinished ...>
2522  restart_syscall(<... resuming interrupted restart_syscall ...> <unfinished ...>
2521  ppoll([{fd=13, events=POLLIN}, {fd=8, events=POLLIN}, {fd=7, events=POLLIN}], 3, NULL, NULL, 8 <unfinished ...>
2516  restart_syscall(<... resuming interrupted poll ...> <unfinished ...>
2483  ppoll([{fd=6, events=POLLIN}, {fd=5, events=POLLIN}], 2, NULL, NULL, 8 <unfinished ...>
2516  <... restart_syscall resumed> )   = 1
2516  recvmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="U\2F\2\370+\24\0\3\0\0\0\0\1\0\0\0\0\1\200\0\0\0\200\0\1\0 \1\4\0\0"..., iov_len=4096}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 64
2516  write(5, "\1\0\0\0\0\0\0\0", 8)   = 8
2483  <... ppoll resumed> )             = 1 ([{fd=5, revents=POLLIN}])
2516  poll([{fd=3, events=POLLIN}], 1, -1 <unfinished ...>
2483  read(5, "\1\0\0\0\0\0\0\0", 8)    = 8
2483  clock_gettime(CLOCK_MONOTONIC, {tv_sec=1321, tv_nsec=977494070}) = 0
2483  ppoll([{fd=6, events=POLLIN}, {fd=5, events=POLLIN}], 2, NULL, NULL, 8 <unfinished ...>
2516  <... poll resumed> )              = 1 ([{fd=3, revents=POLLIN}])
2516  recvmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\34\0F\2\223\2\0\0\257\1\0\0\371+\24\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., iov_len=4096}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 64
2516  write(5, "\1\0\0\0\0\0\0\0", 8)   = 8
2483  <... ppoll resumed> )             = 1 ([{fd=5, revents=POLLIN}])
2516  poll([{fd=3, events=POLLIN}], 1, -1 <unfinished ...>
2483  read(5, "\1\0\0\0\0\0\0\0", 8)    = 8
2483  clock_gettime(CLOCK_MONOTONIC, {tv_sec=1321, tv_nsec=981348633}) = 0
2483  ppoll([{fd=6, events=POLLIN}, {fd=5, events=POLLIN}], 2, NULL, NULL, 8 <unfinished ...>
2516  <... poll resumed> )              = 1 ([{fd=3, revents=POLLIN}])
2516  recvmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\241 F\2\6\0\0\3e\1\0\0\1\0\0\0\372+\24\0^\0\0\3\0\0\0\0\0\0\0\0", iov_len=4096}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 32
2516  write(5, "\1\0\0\0\0\0\0\0", 8)   = 8
2483  <... ppoll resumed> )             = 1 ([{fd=5, revents=POLLIN}])
2516  poll([{fd=3, events=POLLIN}], 1, -1 <unfinished ...>
2483  read(5, "\1\0\0\0\0\0\0\0", 8)    = 8
2483  clock_gettime(CLOCK_MONOTONIC, {tv_sec=1321, tv_nsec=981902597}) = 0
2483  ppoll([{fd=6, events=POLLIN}, {fd=5, events=POLLIN}], 2, NULL, NULL, 8 <unfinished ...>
2516  <... poll resumed> )              = 1 ([{fd=3, revents=POLLIN}])
2516  recvmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\34\0F\2\223\2\0\0e\1\0\0\376+\24\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., iov_len=4096}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 64
2516  write(5, "\1\0\0\0\0\0\0\0", 8)   = 8
2483  <... ppoll resumed> )             = 1 ([{fd=5, revents=POLLIN}])
2516  poll([{fd=3, events=POLLIN}], 1, -1 <unfinished ...>
2483  read(5, "\1\0\0\0\0\0\0\0", 8)    = 8
2483  clock_gettime(CLOCK_MONOTONIC, {tv_sec=1321, tv_nsec=984514582}) = 0
2483  ppoll([{fd=6, events=POLLIN}, {fd=5, events=POLLIN}], 2, NULL, NULL, 8 <unfinished ...>
2516  <... poll resumed> )              = 1 ([{fd=3, revents=POLLIN}])
2516  recvmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="U\2F\2G,\24\0\3\0\0\0\0\1\0\0\0\0\1\200\0\0\0\200\0\0\0 \1\5\0\0"..., iov_len=4096}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 64
2516  write(5, "\1\0\0\0\0\0\0\0", 8)   = 8
2483  <... ppoll resumed> )             = 1 ([{fd=5, revents=POLLIN}])
2516  poll([{fd=3, events=POLLIN}], 1, -1 <unfinished ...>
2483  read(5, "\1\0\0\0\0\0\0\0", 8)    = 8
2483  clock_gettime(CLOCK_MONOTONIC, {tv_sec=1322, tv_nsec=58378713}) = 0
2483  ppoll([{fd=6, events=POLLIN}, {fd=5, events=POLLIN}], 2, NULL, NULL, 8 <unfinished ...>
2523  <... restart_syscall resumed> )   = 1
2523  clock_gettime(CLOCK_MONOTONIC, {tv_sec=1323, tv_nsec=269411078}) = 0
2523  recvmsg(10, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="l\1\0\1@\1\0\0\255\0\0\0\275\0\0\0", iov_len=16}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_CMSG_CLOEXEC}, MSG_CMSG_CLOEXEC) = 16
2523  clock_gettime(CLOCK_MONOTONIC, {tv_sec=1323, tv_nsec=269578133}) = 0
2523  poll([{fd=10, events=POLLIN}], 1, 0) = 1 ([{fd=10, revents=POLLIN}])
2523  clock_gettime(CLOCK_MONOTONIC, {tv_sec=1323, tv_nsec=269725354}) = 0
2523  recvmsg(10, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\10\1g\0\22sssa{ss}sa(sa{sv})\0\1\1o\0'\0\0\0"..., iov_len=512}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_CMSG_CLOEXEC}, MSG_CMSG_CLOEXEC) = 512
2523  poll([{fd=12, events=POLLIN}], 1, 0) = 0 (Timeout)
2523  clock_gettime(CLOCK_MONOTONIC, {tv_sec=1323, tv_nsec=270043262}) = 0
2523  poll([{fd=10, events=POLLIN}], 1, 0) = 0 (Timeout)
2523  poll([{fd=10, events=POLLIN}, {fd=12, events=POLLIN}], 2, -1 <unfinished ...>
2516  <... poll resumed> )              = 1 ([{fd=3, revents=POLLIN}])
2516  recvmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="U\2F\2\20<\24\0\3\4\4\0\0\1\0\0\0\0\1\204\4\4\4\204\0\0\3\37%\2\0\0", iov_len=4096}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 32
2516  write(5, "\1\0\0\0\0\0\0\0", 8)   = 8
2483  <... ppoll resumed> )             = 1 ([{fd=5, revents=POLLIN}])
2516  poll([{fd=3, events=POLLIN}], 1, -1 <unfinished ...>
2483  read(5, "\1\0\0\0\0\0\0\0", 8)    = 8
2483  clock_gettime(CLOCK_MONOTONIC, {tv_sec=1326, tv_nsec=96896198}) = 0
2483  ppoll([{fd=6, events=POLLIN}, {fd=5, events=POLLIN}], 2, NULL, NULL, 8 <unfinished ...>
2523  <... poll resumed> )              = 1 ([{fd=10, revents=POLLIN}])
2523  clock_gettime(CLOCK_MONOTONIC, {tv_sec=1327, tv_nsec=755964744}) = 0
2523  recvmsg(10, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="l\1\0\1J\0\0\0\256\0\0\0\255\0\0\0", iov_len=16}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_CMSG_CLOEXEC}, MSG_CMSG_CLOEXEC) = 16
2523  clock_gettime(CLOCK_MONOTONIC, {tv_sec=1327, tv_nsec=756110569}) = 0
2523  poll([{fd=10, events=POLLIN}], 1, 0) = 1 ([{fd=10, revents=POLLIN}])
2523  clock_gettime(CLOCK_MONOTONIC, {tv_sec=1327, tv_nsec=756204153}) = 0
2523  recvmsg(10, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\10\1g\0\1s\0\0\1\1o\0'\0\0\0/org/kde/PolicyK"..., iov_len=250}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_CMSG_CLOEXEC}, MSG_CMSG_CLOEXEC) = 250
2523  poll([{fd=12, events=POLLIN}], 1, 0) = 0 (Timeout)
2523  clock_gettime(CLOCK_MONOTONIC, {tv_sec=1327, tv_nsec=756617322}) = 0
2523  poll([{fd=10, events=POLLIN}], 1, 0) = 0 (Timeout)
2523  poll([{fd=10, events=POLLIN}, {fd=12, events=POLLIN}], 2, -1 <unfinished ...>
2516  <... poll resumed> )              = 1 ([{fd=3, revents=POLLIN}])
2516  recvmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="U\2F\0020C\24\0\3\0\0\0\0\1\0\0\0\0\1\200\0\0\0\200\0\0\3\37%\3\0\0", iov_len=4096}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 32
2516  write(5, "\1\0\0\0\0\0\0\0", 8)   = 8
2483  <... ppoll resumed> )             = 1 ([{fd=5, revents=POLLIN}])
2516  poll([{fd=3, events=POLLIN}], 1, -1 <unfinished ...>
2483  read(5, "\1\0\0\0\0\0\0\0", 8)    = 8
2483  clock_gettime(CLOCK_MONOTONIC, {tv_sec=1327, tv_nsec=921724249}) = 0
2483  ppoll([{fd=6, events=POLLIN}, {fd=5, events=POLLIN}], 2, NULL, NULL, 8 <unfinished ...>
2516  <... poll resumed> )              = 1 ([{fd=3, revents=POLLIN}])
2516  recvmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="U\2F\2\300L\24\0\3\0\0\0\0\1\0\0\0\0\1\200\0\0\0\200\0\1\0 \1\4\0\0", iov_len=4096}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 32
2516  write(5, "\1\0\0\0\0\0\0\0", 8)   = 8
2483  <... ppoll resumed> )             = 1 ([{fd=5, revents=POLLIN}])
2516  poll([{fd=3, events=POLLIN}], 1, -1 <unfinished ...>
2483  read(5,  <unfinished ...>
2516  <... poll resumed> )              = 1 ([{fd=3, revents=POLLIN}])
2483  <... read resumed> "\1\0\0\0\0\0\0\0", 8) = 8
2516  recvmsg(3,  <unfinished ...>
2483  clock_gettime(CLOCK_MONOTONIC,  <unfinished ...>
2516  <... recvmsg resumed> {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="U\2F\2\300L\24\0\3\0\0\0\0\1\0\0\0\0\1\200\0\0\0\200\0\1\0 \1\4\0\0", iov_len=4096}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 32
2483  <... clock_gettime resumed> {tv_sec=1330, tv_nsec=368749372}) = 0
2516  write(5, "\1\0\0\0\0\0\0\0", 8 <unfinished ...>
2483  ppoll([{fd=6, events=POLLIN}, {fd=5, events=POLLIN}], 2, NULL, NULL, 8 <unfinished ...>
2516  <... write resumed> )             = 8
2483  <... ppoll resumed> )             = 1 ([{fd=5, revents=POLLIN}])
2516  poll([{fd=3, events=POLLIN}], 1, -1 <unfinished ...>
2483  read(5, "\1\0\0\0\0\0\0\0", 8)    = 8
2483  clock_gettime(CLOCK_MONOTONIC, {tv_sec=1330, tv_nsec=369051915}) = 0
2483  ppoll([{fd=6, events=POLLIN}, {fd=5, events=POLLIN}], 2, NULL, NULL, 8 <unfinished ...>
2516  <... poll resumed> )              = 1 ([{fd=3, revents=POLLIN}])
2516  recvmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\34\0F\2\223\2\0\0\257\1\0\0\302L\24\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", iov_len=4096}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 32
2516  write(5, "\1\0\0\0\0\0\0\0", 8)   = 8
2483  <... ppoll resumed> )             = 1 ([{fd=5, revents=POLLIN}])
2516  poll([{fd=3, events=POLLIN}], 1, -1 <unfinished ...>
2483  read(5,  <unfinished ...>
2516  <... poll resumed> )              = 1 ([{fd=3, revents=POLLIN}])
2483  <... read resumed> "\1\0\0\0\0\0\0\0", 8) = 8
2516  recvmsg(3,  <unfinished ...>
2483  clock_gettime(CLOCK_MONOTONIC,  <unfinished ...>
2516  <... recvmsg resumed> {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\34\0F\2\223\2\0\0\250\1\0\0\303L\24\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", iov_len=4096}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 32
2483  <... clock_gettime resumed> {tv_sec=1330, tv_nsec=371486791}) = 0
2516  write(5, "\1\0\0\0\0\0\0\0", 8 <unfinished ...>
2483  ppoll([{fd=6, events=POLLIN}, {fd=5, events=POLLIN}], 2, NULL, NULL, 8 <unfinished ...>
2516  <... write resumed> )             = 8
2483  <... ppoll resumed> )             = 1 ([{fd=5, revents=POLLIN}])
2516  poll([{fd=3, events=POLLIN}], 1, -1 <unfinished ...>
2483  read(5, "\1\0\0\0\0\0\0\0", 8)    = 8
2483  clock_gettime(CLOCK_MONOTONIC, {tv_sec=1330, tv_nsec=371697985}) = 0
2483  ppoll([{fd=6, events=POLLIN}, {fd=5, events=POLLIN}], 2, NULL, NULL, 8 <unfinished ...>
2516  <... poll resumed> )              = 1 ([{fd=3, revents=POLLIN}])
2516  recvmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\34\0F\2\223\2\0\0e\1\0\0\305L\24\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., iov_len=4096}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 64
2516  write(5, "\1\0\0\0\0\0\0\0", 8)   = 8
2483  <... ppoll resumed> )             = 1 ([{fd=5, revents=POLLIN}])
2516  poll([{fd=3, events=POLLIN}], 1, -1 <unfinished ...>
2483  read(5, "\1\0\0\0\0\0\0\0", 8)    = 8
2483  clock_gettime(CLOCK_MONOTONIC, {tv_sec=1330, tv_nsec=374784880}) = 0
2483  ppoll([{fd=6, events=POLLIN}, {fd=5, events=POLLIN}], 2, NULL, NULL, 8 <unfinished ...>
2516  <... poll resumed> )              = 1 ([{fd=3, revents=POLLIN}])
2516  recvmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="U\2F\2\7M\24\0\3\0\0\0\0\1\0\0\0\0\1\200\0\0\0\200\0\0\0 \1\5\0\0"..., iov_len=4096}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 64
2516  write(5, "\1\0\0\0\0\0\0\0", 8)   = 8
2483  <... ppoll resumed> )             = 1 ([{fd=5, revents=POLLIN}])
2516  poll([{fd=3, events=POLLIN}], 1, -1 <unfinished ...>
2483  read(5, "\1\0\0\0\0\0\0\0", 8)    = 8
2483  clock_gettime(CLOCK_MONOTONIC, {tv_sec=1330, tv_nsec=441292243}) = 0
2483  ppoll([{fd=6, events=POLLIN}, {fd=5, events=POLLIN}], 2, NULL, NULL, 8 <unfinished ...>
2516  <... poll resumed> )              = 1 ([{fd=3, revents=POLLIN}])
2516  recvmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="U\2F\2\31N\24\0\3\4\4\0\0\1\0\0\0\0\1\204\4\4\4\204\0\0\3\37%\2\0\0", iov_len=4096}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 32
2516  write(5, "\1\0\0\0\0\0\0\0", 8)   = 8
2483  <... ppoll resumed> )             = 1 ([{fd=5, revents=POLLIN}])
2516  poll([{fd=3, events=POLLIN}], 1, -1 <unfinished ...>
2483  read(5, "\1\0\0\0\0\0\0\0", 8)    = 8
2483  clock_gettime(CLOCK_MONOTONIC, {tv_sec=1330, tv_nsec=714605652}) = 0
2483  ppoll([{fd=6, events=POLLIN}, {fd=5, events=POLLIN}], 2, NULL, NULL, 8 <detached ...>
Reply to: