[opensuse-factory] PolicyKit/NetworkManager bug
I have been digging through documentation on policykit to figure out why NetworkManager needs root for user side settings. I think I may be on to something. It looks like NetworkManager is misidentifying its actions and sending policykit the wrong signal. Here, I have added a local connection and it requires root authentication. Note, that "System Connection" was unchecked and I have had "Connect Automatically" toggled both ways and got the same result. The GNOME network manager also requires root authentication. Notice under "Action" it says,"Modify network connections for all users." However, as the box was unchecked, this is not a correct report of the action. Not sure why Network Manager is listed under Vendor... http://wstaw.org/m/2011/11/21/nm- appletneedsrootimmediatelywhennetworkisselected.png Another attempt in the exact fashion gives a different but similar authentication dialog. Note in this dialog, it correctly identifies the action as "Modify personal network connections." http://wstaw.org/m/2011/11/21/nmneedsrootafterputtinginwifipassword.png A quick look at the policykit module in System Settings shows that the only policy requiring root should be to set system wide connections for all users. No other section here shows a need for authentication. http://wstaw.org/m/2011/11/21/systemnconnectionsonlyoneshowingneedforroot.pn... Considering what I have figured upon, it would look that the NetworkManager (backend, not desktop specific applet) is misidentifying its actions. However that doesn't explain its asking for root when it does identify the action correctly as user level. There may be multiple issues here, or the KDE module for policykit is misrepresenting the setting actually present. -- Roger Luedecke openSUSE Ambassador Ind. Repairs and Consulting **Looking for a C++ etc. mentor*** -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
https://bugzilla.novell.com/show_bug.cgi?id=716291 -- Stefan Seyfried "Dispatch war rocket Ajax to bring back his body!" -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Monday, November 21, 2011 07:24:52 AM Stefan Seyfried wrote:
https://bugzilla.novell.com/show_bug.cgi?id=716291 I'm very aware of that bugzilla. In fact, if you read it you would see I had commented on it earlier. If you read my mail (sorry it is rather long) you would see I'm attempting to debug, not report a bug. -- Roger Luedecke openSUSE Ambassador Ind. Repairs and Consulting **Looking for a C++ etc. mentor*** -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On 21.11.2011 07:47, Roger Luedecke wrote:
you would see I'm attempting to debug, not report a bug.
Well, there is not much to debug IMVHO. The default settings are too restrictive. PK is working as designed / configured, but the configuration is not appropriate for a normal laptop / desktop. -- Stefan Seyfried "Dispatch war rocket Ajax to bring back his body!" -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On 21.11.2011 07:47, Roger Luedecke wrote:
you would see I'm attempting to debug, not report a bug.
Well, there is not much to debug IMVHO. The default settings are too restrictive. PK is working as designed / configured, but the configuration is not appropriate for a normal laptop / desktop. Agreed. If these settings are deliberate, they are unnecessarilly restrictive. However, looking into the System Settings module of KDE it would seem to indicate that this behavior shouldn't be occuring in the first place. I feel
On Monday, November 21, 2011 07:51:32 AM Stefan Seyfried wrote: that I went over each setting there enough times to come to a solid conclusion in that regards and made sure to look at documentation in order to assure I am not making an unbased assumption. Now, if what the module is reflecting is innacurate (and I saw no reason to assume that) then it would indicate an additional bug with the GUI modules. Further, doing the same action produced different reasons for authentication. One was accurate to the user-level action and the other indicated system wide settings changes that were not being done. This would imply a bug, and not merely an overly restrictive setting. If it were the latter, the authentcation should always show the same reason; namely http://wstaw.org/m/2011/11/21/nmneedsrootafterputtinginwifipassword.png "Modify personal network connections." Unless the system wide toggle is checked, it should not be showing http://wstaw.org/m/2011/11/21/nm- appletneedsrootimmediatelywhennetworkisselected.png at all. Compound this with other weird authentication issues being reported (some of which I have experienced and have caused Policy Kit to crash) and it would indicate this issue is definately bigger than a simple policy choice. -- Roger Luedecke openSUSE Ambassador Ind. Repairs and Consulting **Looking for a C++ etc. mentor*** -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Sunday 20 Nov 2011 23:22:33 Roger Luedecke wrote:
Agreed. If these settings are deliberate, they are unnecessarilly restrictive. However, looking into the System Settings module of KDE it would seem to indicate that this behavior shouldn't be occuring in the first place. I feel that I went over each setting there enough times to come to a solid conclusion in that regards and made sure to look at documentation in order to assure I am not making an unbased assumption. Now, if what the module is reflecting is innacurate (and I saw no reason to assume that) then it would indicate an additional bug with the GUI modules.
I have an uninvestigated hunch that the module only knows about the upstream configuration policy files (I mentioned the path in my reply to Stefan yesterday) and not the SUSE specific things in /etc/. Will -- Will Stephenson, openSUSE Team SUSE LINUX Products GmbH, GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 21284 (AG Nürnberg) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
roger.luedecke@gmail.com wrote:
A quick look at the policykit module in System Settings shows that the only policy requiring root should be to set system wide connections for all users. No other section here shows a need for authentication. http://wstaw.org/m/2011/11/21/systemnconnectionsonlyoneshowingneedforroot.pn...
That editor is obviously broken. It modifies non-config files in /usr/share(!). IOW breaks delta-rpms and the settings are lost if affected packages are upgraded. The editor needs to use /var/lib/polkit-1/localauthority/ instead. That's also where other overrides end up. I'm not sure if there actually is any sane interface in PK to work with that data though. cu Ludwig -- (o_ Ludwig Nussel //\ V_/_ http://www.suse.de/ SUSE LINUX Products GmbH, GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG Nürnberg) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Am Sonntag, 20. November 2011, 21:36:48 schrieb roger.luedecke@gmail.com:
I have been digging through documentation on policykit to figure out why NetworkManager needs root for user side settings. I think I may be on to something. It looks like NetworkManager is misidentifying its actions and sending policykit the wrong signal.
https://bugzilla.gnome.org/show_bug.cgi?id=646187 Comment 9-11 might explain why non-root connections still need root password. AFAIU canceling the dialogue that asls for athentication might work though. Sven -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
participants (6)
-
Ludwig Nussel -
Roger Luedecke -
roger.luedecke＠gmail.com
-
Stefan Seyfried -
Sven Burmeister -
Will Stephenson