Bug#1076728: elogind: privileged operation with polkit fails

2025-01-08 Thread Andrew Bower
On Wed, Jan 08, 2025 at 08:49:28AM +, Andrew Bower wrote: > Control: tags -1 patch > > On Wed, Jan 08, 2025 at 07:33:31AM +, Mark Hindley wrote: > > On Tue, Jan 07, 2025 at 09:28:48PM +0100, Thorsten Glaser wrote: > > > >> before mounting cgroups there. So, adding elogind to LSB header >

Bug#1076728: elogind: privileged operation with polkit fails

2025-01-08 Thread Andrew Bower
Control: tags -1 patch On Wed, Jan 08, 2025 at 07:33:31AM +, Mark Hindley wrote: > On Tue, Jan 07, 2025 at 09:28:48PM +0100, Thorsten Glaser wrote: > > >> before mounting cgroups there. So, adding elogind to LSB header > > >> 'Should-Start' > > > > >I just tried exactly this with syvinit and

Bug#1076728: elogind: privileged operation with polkit fails

2025-01-07 Thread Mark Hindley
Thorsten, On Tue, Jan 07, 2025 at 09:28:48PM +0100, Thorsten Glaser wrote: > >> before mounting cgroups there. So, adding elogind to LSB header > >> 'Should-Start' > > >I just tried exactly this with syvinit and it works! Docker also works. > > So maybe an X-Start-Before in elogind? Thanks. I

Bug#1076728: elogind: privileged operation with polkit fails

2025-01-07 Thread Thorsten Glaser
On Tue, 7 Jan 2025, Andrew Bower wrote: >On Thu, Dec 19, 2024 at 09:53:47AM +, Mark Hindley wrote: >> Looking at docker.io's initscript, it checks if /sys/fs/cgroup is a mount >> point >> before mounting cgroups there. So, adding elogind to LSB header >> 'Should-Start' >I just tried exactly

Bug#1076728: elogind: privileged operation with polkit fails

2025-01-07 Thread Andrew Bower
Hi Mark, On Thu, Dec 19, 2024 at 09:53:47AM +, Mark Hindley wrote: > Looking at docker.io's initscript, it checks if /sys/fs/cgroup is a mount > point > before mounting cgroups there. So, adding elogind to LSB header 'Should-Start' > ought to ensure elogind is started first to mount /sys/fs/c

Bug#1076728: elogind: privileged operation with polkit fails

2024-12-19 Thread Mark Hindley
On Wed, Dec 18, 2024 at 07:01:35PM +, Mark Hindley wrote: > Maybe. I am at (or probably beyond) my area of expertise. At the moment I am > unsure if elogind ought to be using its own cgroups namespace or if docker.io > is > behaving badly here. Time for some reading My reading of systemd'

Bug#1076728: elogind: privileged operation with polkit fails

2024-12-18 Thread Andrew Bower
On Wed, Dec 18, 2024 at 07:01:35PM +, Mark Hindley wrote: > Control: retitle -1 elogind: use of cgroups conflicts with docker.io > > On Wed, Dec 18, 2024 at 06:29:32PM +, Andrew Bower wrote: > > Control: tags 1076728 - moreinfo unreproducible > > > > Hi Mark, > > > > On Wed, Dec 18, 2024

Bug#1076728: elogind: privileged operation with polkit fails

2024-12-18 Thread Mark Hindley
Control: retitle -1 elogind: use of cgroups conflicts with docker.io On Wed, Dec 18, 2024 at 06:29:32PM +, Andrew Bower wrote: > Control: tags 1076728 - moreinfo unreproducible > > Hi Mark, > > On Wed, Dec 18, 2024 at 10:10:03AM +, Mark Hindley wrote: > > Can you please check the runtime

Bug#1076728: elogind: privileged operation with polkit fails

2024-12-18 Thread Andrew Bower
Control: tags 1076728 - moreinfo unreproducible Hi Mark, On Wed, Dec 18, 2024 at 10:10:03AM +, Mark Hindley wrote: > Can you please check the runtime data? > > How is /sys/fs/cgroup mounted? Differently from yours... $ mount|grep cgroup cgroup on /sys/fs/cgroup type tmpfs (rw,relatime,mode

Bug#1076728: elogind: privileged operation with polkit fails

2024-12-18 Thread Mark Hindley
[ Dropping xfce4 CC ] Andrew, On Tue, Dec 17, 2024 at 07:52:10PM +, Simon McVittie wrote: > On Tue, 17 Dec 2024 at 19:15:26 +, Andrew Bower wrote: > > It looks like the agent (the legacy gnome one) fails to start when > > launched by the DE, as does lxagent if substituted: > > > > Unab

Bug#1076728: elogind: privileged operation with polkit fails

2024-12-17 Thread Andrew Bower
I think we've moved on now, but for completeness, Simon, On Tue, Dec 17, 2024 at 07:15:26PM +, Andrew Bower wrote: > On Tue, Dec 17, 2024 at 10:53:39AM +, Simon McVittie wrote: > > > Is the prompt inline on the terminal, or is it a separate > > window? > > Inline in terminal. > > > pk

Bug#1076728: elogind: privileged operation with polkit fails

2024-12-17 Thread Simon McVittie
On Tue, 17 Dec 2024 at 19:02:19 +, Simon McVittie wrote: > 1. there is no polkit authentication agent that is part of the XFCE >project and is packaged in Debian; > > 2. installing XFCE doesn't really guarantee to provide someone else's >polkit authentication agent, either; I've opene

Bug#1076728: elogind: privileged operation with polkit fails

2024-12-17 Thread Simon McVittie
On Tue, 17 Dec 2024 at 19:15:26 +, Andrew Bower wrote: > It looks like the agent (the legacy gnome one) fails to start when > launched by the DE, as does lxagent if substituted: > > Unable to determine the session we are in: No session for pid 24111 This could be an elogind problem. It indi

Bug#1076728: elogind: privileged operation with polkit fails

2024-12-17 Thread Andrew Bower
Mark, On Tue, Dec 17, 2024 at 04:40:42PM +, Mark Hindley wrote: > On Tue, Dec 17, 2024 at 10:53:39AM +, Simon McVittie wrote: > > check that the desktop environment is actually launching a polkit agent and > > registering it with polkitd on the D-Bus system bus. Thanks for the extra check

Bug#1076728: elogind: privileged operation with polkit fails

2024-12-17 Thread Simon McVittie
On Tue, 17 Dec 2024 at 16:40:42 +, Mark Hindley wrote: > On my working setup, polkitd is running This is not in doubt: if pkexec works, then polkitd must necessarily be either running, or available for D-Bus autostarting (after which it will be running). If that wasn't the case then pkexec cou

Bug#1076728: elogind: privileged operation with polkit fails

2024-12-17 Thread Simon McVittie
On Tue, 17 Dec 2024 at 14:53:11 +0100, Yves-Alexis Perez wrote: > I'm a bit unsure how to reply to your mail because I don't really see > questions. My question was: does XFCE provide a polkit authentication agent? And it seems that the answer is in three parts: 1. there is no polkit authenticat

Bug#1076728: elogind: privileged operation with polkit fails

2024-12-17 Thread Andrew Bower
Hi Tito, Thanks for sharing your state! (And others for helpful replies - I'm just answering this one for now.) On Tue, Dec 17, 2024 at 02:43:36PM +0100, tito wrote: > Hi, > I'm on a sysvinit/elogind system too and have KDE and xfce4 installed. > I use xfce4 as daily driver and everything works a

Bug#1076728: elogind: privileged operation with polkit fails

2024-12-17 Thread Mark Hindley
Simon, Thanks, that is very useful. Andrew, On Tue, Dec 17, 2024 at 10:53:39AM +, Simon McVittie wrote: > check that the desktop environment is actually launching a polkit agent and > registering it with polkitd on the D-Bus system bus. I omitted to check for this in the basic steps I gave

Bug#1076728: elogind: privileged operation with polkit fails

2024-12-17 Thread Yves-Alexis Perez
On Tue, Dec 17, 2024 at 10:53:39AM +, Simon McVittie wrote: > Context for XFCE and polkitd maintainers (cc'd): a user of XFCE on a > sysvinit/elogind system has found that authorizing privileged operations > via polkit is not working as intended. I'm not at all sure that this is > actually an e

Bug#1076728: elogind: privileged operation with polkit fails

2024-12-17 Thread tito
On Tue, 17 Dec 2024 10:53:39 + Simon McVittie wrote: > Context for XFCE and polkitd maintainers (cc'd): a user of XFCE on a > sysvinit/elogind system has found that authorizing privileged operations > via polkit is not working as intended. I'm not at all sure that this is > actually an elogin

Bug#1076728: elogind: privileged operation with polkit fails

2024-12-17 Thread Simon McVittie
Context for XFCE and polkitd maintainers (cc'd): a user of XFCE on a sysvinit/elogind system has found that authorizing privileged operations via polkit is not working as intended. I'm not at all sure that this is actually an elogind problem: it might be a result of XFCE not obviously containing a

Bug#1076728: elogind: privileged operation with polkit fails

2024-12-17 Thread Mark Hindley
On Tue, Dec 17, 2024 at 12:04:00AM +, Andrew Bower wrote: > On Mon, Dec 16, 2024 at 05:41:57PM +, Mark Hindley wrote: > [...] > > All lightdm and xfce hibernate/restart/shutdown options are available and > > functional. > ^^^ > > This made me check: the lightdm controls are also

Bug#1076728: elogind: privileged operation with polkit fails

2024-12-16 Thread Mark Hindley
On Mon, Dec 16, 2024 at 09:41:31PM +, Andrew Bower wrote: > I have some additional packages, but otherwise the same > (libpam-elogind-compat virtual package does not seem to be available to > install - I didn't look into it further): That is cruft. I have removed it with no change. Mark

Bug#1076728: elogind: privileged operation with polkit fails

2024-12-16 Thread Andrew Bower
On Mon, Dec 16, 2024 at 05:41:57PM +, Mark Hindley wrote: [...] > All lightdm and xfce hibernate/restart/shutdown options are available and > functional. ^^^ This made me check: the lightdm controls are also unavailable so that perhaps limits the scope of the problem. My lightdm pr

Bug#1076728: elogind: privileged operation with polkit fails

2024-12-16 Thread Andrew Bower
Hi Mark, On Mon, Dec 16, 2024 at 05:41:57PM +, Mark Hindley wrote: > I am afraid I still can't reproduce this. Thank you so much for following up! > Check some basics please. I have the following installed: > > test@DebianUnstable:~$ dpkg -l|grep -E 'polkit|elogind|systemd'|grep ^ii > ii e

Bug#1076728: elogind: privileged operation with polkit fails

2024-12-16 Thread Mark Hindley
Andrew, I am afraid I still can't reproduce this. Check some basics please. I have the following installed: test@DebianUnstable:~$ dpkg -l|grep -E 'polkit|elogind|systemd'|grep ^ii ii elogind 255.5-1debian3 amd64user, seat and session ma

Bug#1076728: elogind: privileged operation with polkit fails

2024-12-14 Thread Andrew Bower
On Sat, Dec 14, 2024 at 10:22:39PM +, Mark Hindley wrote: > On Sat, Dec 14, 2024 at 09:12:35PM +, Andrew Bower wrote: > > LSM: AppArmor: enabled > > Is there anything in the apparmor log? No. > Does disabling or removing it help? Sadly not. I have now removed it - no LSM active - but sa

Bug#1076728: elogind: privileged operation with polkit fails

2024-12-14 Thread Mark Hindley
Andrew, On Sat, Dec 14, 2024 at 09:12:35PM +, Andrew Bower wrote: > LSM: AppArmor: enabled Is there anything in the apparmor log? Does disabling or removing it help? Mark

Bug#1076728: elogind: privileged operation with polkit fails

2024-12-14 Thread Andrew Bower
Hi Mark, On Mon, Jul 22, 2024 at 09:01:58PM +0100, Mark Hindley wrote: > Control: tags -1 moreinfo unreproducible > > Lorenzo, > > Thanks for this > > On Mon, Jul 22, 2024 at 08:06:56PM +0200, Lorenzo Puliti wrote: > > Package: elogind > > Version: 255.5-1debian2 > > Severity: important > > X-D

Bug#1076728: elogind: privileged operation with polkit fails

2024-07-22 Thread lorenzo
On Mon, 22 Jul 2024 21:01:58 +0100 Mark Hindley wrote: > I don't see anything in the logs you provided either (other than the > InteractiveAuthorizationRequired failure). Have you got any custom > polkit rules? I don't think so, I don't even know exactly how to do that.. # ls -l /etc/polkit-1/

Bug#1076728: elogind: privileged operation with polkit fails

2024-07-22 Thread Mark Hindley
Control: tags -1 moreinfo unreproducible Lorenzo, Thanks for this On Mon, Jul 22, 2024 at 08:06:56PM +0200, Lorenzo Puliti wrote: > Package: elogind > Version: 255.5-1debian2 > Severity: important > X-Debbugs-Cc: plore...@disroot.org > > Hello Mark, > > with elogind linked to libsystemd0 privi

Bug#1076728: elogind: privileged operation with polkit fails

2024-07-22 Thread Lorenzo Puliti
Package: elogind Version: 255.5-1debian2 Severity: important X-Debbugs-Cc: plore...@disroot.org Hello Mark, with elogind linked to libsystemd0 privileged operations with polkit no longer work, example: * reboot, shutdown, suspend via option in menĂ¹/panel of desktop * mounting a usb stick with th