[Bug 831400] New: polkit-default-privs doesn't seem to work anymore (org.freedesktop.login1.suspend not working)
https://bugzilla.novell.com/show_bug.cgi?id=831400 https://bugzilla.novell.com/show_bug.cgi?id=831400#c0 Summary: polkit-default-privs doesn't seem to work anymore (org.freedesktop.login1.suspend not working) Classification: openSUSE Product: openSUSE Factory Version: 13.1 Milestone 2 Platform: Other OS/Version: Other Status: NEW Severity: Major Priority: P5 - None Component: Other AssignedTo: lnussel@suse.com ReportedBy: meissner@suse.com QAContact: qa-bugs@suse.de CC: lnussel@suse.com, coolo@suse.com, meissner@suse.com, rhafer@suse.com, wstephenson@suse.com, hrvoje.senjan@gmail.com, mike.catanzaro@gmail.com Depends on: 804376 Found By: Development Blocker: --- +++ This bug was initially created as a clone of Bug #804376 +++ In pre-13.1 Factory this happens_ E.g. /etc/polkit-1/rules-d/90-default-privs: 'org.freedesktop.login1.suspend': [ 'auth_admin', 'auth_admin', 'auth_admin' ], Both suspending within KDE session and qdbus --system org.freedesktop.login1 /org/freedesktop/login1 org.freedesktop.login1.Manager.Suspend true does *not* ask for password: pkaction --action-id org.freedesktop.login1.suspend --verbose org.freedesktop.login1.suspend: description: Suspend the system message: Authentication is required for suspending the system. vendor: The systemd Project vendor_url: http://www.freedesktop.org/wiki/Software/systemd icon: implicit any: auth_admin_keep implicit inactive: auth_admin_keep implicit active: yes I checked the 90-default-privs with debug=1 and the rule for org.freedesktop.login1.suspend is not queried -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=831400 https://bugzilla.novell.com/show_bug.cgi?id=831400#c1 --- Comment #1 from Hrvoje Senjan <hrvoje.senjan@gmail.com> 2013-07-25 20:35:22 UTC --- Fun fact: building polkit from openSUSE:12.3(:Update) does not change the situation... -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=831400 https://bugzilla.novell.com/show_bug.cgi?id=831400#c2 Ludwig Nussel <lnussel@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |meissner@suse.com --- Comment #2 from Ludwig Nussel <lnussel@suse.com> 2013-07-26 08:43:41 CEST --- looks like pkaction does not list the overrides but only the xml defaults. Have you tried modifying org.freedesktop.login1.suspend-multiple-sessions instead? Looks like logind tries that one for me after failing on org.freedesktop.login1.suspend -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=831400 https://bugzilla.novell.com/show_bug.cgi?id=831400#c3 Marcus Meissner <meissner@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- InfoProvider|meissner@suse.com |hrvoje.senjan@gmail.com --- Comment #3 from Marcus Meissner <meissner@suse.com> 2013-07-26 09:32:37 UTC --- needinfo is probably for Hrvoje -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=831400 https://bugzilla.novell.com/show_bug.cgi?id=831400#c4 Hrvoje Senjan <hrvoje.senjan@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW InfoProvider|hrvoje.senjan@gmail.com | --- Comment #4 from Hrvoje Senjan <hrvoje.senjan@gmail.com> 2013-07-26 16:26:55 UTC --- (In reply to comment #2)
looks like pkaction does not list the overrides but only the xml defaults. Indeed.
Have you tried modifying org.freedesktop.login1.suspend-multiple-sessions instead?
That one works correctly, yes. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=831400 https://bugzilla.novell.com/show_bug.cgi?id=831400#c5 --- Comment #5 from Hrvoje Senjan <hrvoje.senjan@gmail.com> 2013-07-26 16:36:14 UTC --- Another thing. I can't validate that modifying rules for org.freedesktop.login1.suspend worked correctly with 12.3, as i haven't tried there. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=831400 https://bugzilla.novell.com/show_bug.cgi?id=831400#c6 --- Comment #6 from Ludwig Nussel <lnussel@suse.com> 2013-08-09 14:35:21 CEST --- Is there anything left to answer here? Looks like the problem was using the wrong privilege name, right? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=831400 https://bugzilla.novell.com/show_bug.cgi?id=831400#c7 --- Comment #7 from Hrvoje Senjan <hrvoje.senjan@gmail.com> 2013-08-12 19:05:25 UTC --- (In reply to comment #6)
Is there anything left to answer here? Looks like the problem was using the wrong privilege name, right?
How can it be wrong? org.freedesktop.login1.suspend and org.freedesktop.login1.suspend-multiple-sessions are not the same things. What i meant in comment 4 was that the latter works, but the first doesn't. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=831400 https://bugzilla.novell.com/show_bug.cgi?id=831400#c8 --- Comment #8 from Ludwig Nussel <lnussel@suse.com> 2013-08-19 09:48:36 CEST --- loginctl should tell you whether there are multiple sessions. If there is only one and you still need to use org.freedesktop.login1.suspend-multiple-sessions then there is a bug somewhere unrelated to polkit. It's the fault of the application that requests suspend then. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=831400 https://bugzilla.novell.com/show_bug.cgi?id=831400#c9 Ludwig Nussel <lnussel@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |WORKSFORME --- Comment #9 from Ludwig Nussel <lnussel@suse.com> 2013-10-10 16:33:26 CEST --- I've further investigated the behavior of org.freedesktop.login1.suspend-multiple-sessions. The trick here is that org.freedesktop.login1.suspend-multiple-sessions implies org.freedesktop.login1.suspend. Ie if you set something like org.freedesktop.login1.suspend-multiple-sessions yes org.freedesktop.login1.suspend auth_admin It wont work because having the authorization for suspend-multiple-sessions automatically means authorization for suspend. So you always have to change both at the same time or make sure suspend-multiple-sessions has a more restrictive setting than suspend. AFAICT logind works correctly (13.1 Beta1). -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com