I use a YubiKey + PIN as my normal authentication method on Ubuntu
26.04. It works correctly for GDM login and `sudo`.

I noticed the problem when launching Input Remapper, which requests
elevated privileges through polkit. The polkit prompt falls back to my
account password instead of allowing YubiKey + PIN authentication.

Since the same `pam_u2f` setup works elsewhere, this appears to be the
issue described here: polkit 127 sandboxes its PAM helper so that it
cannot access the YubiKey’s `hidraw` device unless the distribution’s
`pam-u2f` package supplies the required systemd permissions. Ubuntu’s
package currently does not.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2148352

Title:
  Fix authentication with polkit 127+

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/pam-u2f/+bug/2148352/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to