https://bugzilla.novell.com/show_bug.cgi?id=804376 https://bugzilla.novell.com/show_bug.cgi?id=804376#c1 Marcus Meissner changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO CC| |lnussel@suse.com InfoProvider| |rhafer@suse.com AssignedTo|bnc-team-screening@forge.pr |meissner@suse.com |ovo.novell.com | --- Comment #1 from Marcus Meissner 2013-02-20 07:57:14 UTC --- can you give the content of /var/lib/polkit-1/localauthority/10-vendor.d/org.libvirt.unix.manage* ? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=804376 https://bugzilla.novell.com/show_bug.cgi?id=804376#c3 Marcus Meissner changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner@suse.com Summary|polkit-default-privs.local |polkit-default-privs |doesn't seem to work |doesn't seem to work |anymore |anymore (localauthority | |backend gone) --- Comment #3 from Marcus Meissner 2013-02-20 22:06:18 UTC --- the whole localauthority backend (that we use here) got thrown away during devcelopment and we failed to notice helpful hint now "you can just implement this in JavaScript". Will see that I can do this in the next days. :( -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=804376 https://bugzilla.novell.com/show_bug.cgi?id=804376#c4 --- Comment #4 from Ludwig Nussel 2013-02-21 09:15:55 CET --- there are two ways, either generate the javascript code from set_polkit_default_privs or write javascript code that parses the files itself. I guess the latter is harder but would be more correct. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=804376 https://bugzilla.novell.com/show_bug.cgi?id=804376#c6 Ludwig Nussel changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |coolo@suse.com --- Comment #6 from Ludwig Nussel 2013-02-21 15:20:55 CET --- Settings overwritten that were not enforced in last betas: de.berlios.smb4k.mounthelper.mount yes -> auth_admin_keep de.berlios.smb4k.mounthelper.unmount yes -> auth_admin_keep org.freedesktop.consolekit.system.stop-multiple-users auth_admin_keep -> yes org.freedesktop.consolekit.system.restart-multiple-users auth_admin_keep -> yes org.freedesktop.login1.inhibit-block-shutdown yes -> auth_admin_keep org.freedesktop.login1.inhibit-delay-shutdown yes -> auth_admin_keep org.freedesktop.login1.inhibit-block-sleep yes -> auth_admin_keep org.freedesktop.login1.inhibit-delay-sleep yes -> auth_admin_keep org.freedesktop.login1.inhibit-block-idle yes -> auth_admin_keep org.freedesktop.login1.inhibit-handle-power-key yes -> auth_admin_keep org.freedesktop.login1.inhibit-handle-suspend-key yes -> auth_admin_keep org.freedesktop.login1.inhibit-handle-hibernate-key yes -> auth_admin_keep org.freedesktop.login1.inhibit-handle-lid-switch yes -> auth_admin_keep org.freedesktop.login1.power-off-multiple-sessions auth_admin_keep -> yes org.freedesktop.login1.reboot-multiple-sessions auth_admin_keep -> yes org.freedesktop.ModemManager.Device.Control auth_self_keep -> yes org.freedesktop.ModemManager.USSD yes -> auth_admin org.freedesktop.NetworkManager.sleep-wake no -> yes org.freedesktop.NetworkManager.wifi.share.protected yes -> auth_admin org.freedesktop.NetworkManager.wifi.share.open yes -> auth_admin org.freedesktop.packagekit.system-network-proxy-configure yes -> auth_admin_keep org.freedesktop.timedate1.set-timezone auth_admin_keep -> yes org.freedesktop.udisks2.rescan yes -> auth_admin_keep org.freedesktop.udisks2.ata-check-power yes -> auth_admin_keep org.freedesktop.udisks2.ata-standby yes -> auth_admin_keep org.freedesktop.udisks2.cancel-job yes -> auth_admin_keep org.opensuse.cupspkhelper.mechanism.job-edit yes -> auth_admin_keep -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=804376 https://bugzilla.novell.com/show_bug.cgi?id=804376#c Stephan Kulow changed: What |Removed |Added ---------------------------------------------------------------------------- Flag| |SHIP_STOPPER+ -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=804376 https://bugzilla.novell.com/show_bug.cgi?id=804376#c9 --- Comment #9 from Bernhard Wiedemann 2013-02-21 17:00:09 CET --- This is an autogenerated message for OBS integration: This bug (804376) was mentioned in https://build.opensuse.org/request/show/155990 Factory / polkit-default-privs -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=804376 https://bugzilla.novell.com/show_bug.cgi?id=804376#c Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard| |obs:running:1375:moderate -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=804376 https://bugzilla.novell.com/show_bug.cgi?id=804376#c11 Michael Catanzaro changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mike.catanzaro@gmail.com --- Comment #11 from Michael Catanzaro 2013-02-26 16:00:45 UTC --- *** Bug 796059 has been marked as a duplicate of this bug. *** http://bugzilla.novell.com/show_bug.cgi?id=796059 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=804376 https://bugzilla.novell.com/show_bug.cgi?id=804376#c13 --- Comment #13 from Bernhard Wiedemann 2013-02-27 12:00:08 CET --- This is an autogenerated message for OBS integration: This bug (804376) was mentioned in https://build.opensuse.org/request/show/156660 Factory / polkit-default-privs https://build.opensuse.org/request/show/156661 Maintenance / -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=804376 https://bugzilla.novell.com/show_bug.cgi?id=804376#c15 --- Comment #15 from Swamp Workflow Management 2013-02-28 17:27:37 UTC --- openSUSE-RU-2013:0366-1: An update that has one recommended fix can now be installed. Category: recommended (low) Bug References: 804376 CVE References: Sources used: openSUSE 12.3 (src): polkit-default-privs-12.3-6.11.1 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=804376 https://bugzilla.novell.com/show_bug.cgi?id=804376#c17 Hrvoje Senjan changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |hrvoje.senjan@gmail.com --- Comment #17 from Hrvoje Senjan 2013-07-22 23:19:09 UTC --- Do we need another report for Factory? E.g. /etc/polkit-1/rules-d/90-default-privs: 'org.freedesktop.login1.suspend': [ 'auth_admin', 'auth_admin', 'auth_admin' ], Both suspending within KDE session and qdbus --system org.freedesktop.login1 /org/freedesktop/login1 org.freedesktop.login1.Manager.Suspend true does *not* ask for password: pkaction --action-id org.freedesktop.login1.suspend --verbose org.freedesktop.login1.suspend: description: Suspend the system message: Authentication is required for suspending the system. vendor: The systemd Project vendor_url: http://www.freedesktop.org/wiki/Software/systemd icon: implicit any: auth_admin_keep implicit inactive: auth_admin_keep implicit active: yes -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

rpm -qf /etc/polkit-1/rules-d/90-default-privs rpm -qf /etc/polkit-1/rules.d/90-default-privs.rules

is this your own file? Not sure i understand the question :-) I've tried both changing polkit-default-privs.standard and adding auth_admin to

https://bugzilla.novell.com/show_bug.cgi?id=804376 https://bugzilla.novell.com/show_bug.cgi?id=804376#c19 --- Comment #19 from Hrvoje Senjan 2013-07-23 11:35:18 UTC --- (In reply to comment #18) polkit-default-privs-13.1-192.2.noarch i | polkit-default-privs | package | 13.1-192.2 | noarch | Base_System polkit-default-privs.local, with the same result... -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=804376 https://bugzilla.novell.com/show_bug.cgi?id=804376#c21 --- Comment #21 from Hrvoje Senjan 2013-07-23 11:57:13 UTC --- Sure, i have both: libmozjs185-1_0-1.8.5-3.53.x86_64 libmozjs-17_0-17.0-2.4.x86_64 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=804376 https://bugzilla.novell.com/show_bug.cgi?id=804376#c22 Michele Cherici changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |one@contezero.com --- Comment #22 from Michele Cherici 2014-03-13 18:22:34 UTC --- I use opensuse 13.1 and here set_polkit_default_privs doesn't work. I've added the following line to /etc/polkit-default-privs.local org.freedesktop.udisks2.filesystem-mount auth_admin:auth_admin:yes but after executing set_polkit_default_privs I have the following result from pkaction command: pkaction --action-id org.freedesktop.udisks2.filesystem-mount-system --verbose org.freedesktop.udisks2.filesystem-mount-system: description: Mount a filesystem on a system device message: Authentication is required to mount the filesystem vendor: The udisks Project vendor_url: http://udisks.freedesktop.org/ icon: drive-removable-media implicit any: auth_admin implicit inactive: auth_admin implicit active: auth_admin_keep I think the bug should be reopened or a new bug should be filed for 13.1 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=804376 https://bugzilla.novell.com/show_bug.cgi?id=804376#c24 --- Comment #24 from Michele Cherici 2014-03-14 09:26:32 UTC --- After more investigation the changes done to /etc/polkit-default-privs.local are correctly applied to the system (after executing set_polkit_default_privs) but pkaction shows the wrong permissions. This is a bug in pkaction or I've misunderstood pkaction's behavior? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=804376 https://bugzilla.novell.com/show_bug.cgi?id=804376#c26 --- Comment #26 from Michele Cherici 2014-03-14 10:05:15 UTC --- Thanks for your reply. Unfortunately this makes pkaction useless, I hope polkit developers will correct this bug. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.