[Bug 798769] New: LightDM not authorized to shut down/restart/suspend/hibernate any more
![](https://seccdn.libravatar.org/avatar/3035b38ff33cf86f480bb169b8500b80.jpg?s=120&d=mm&r=g)
https://bugzilla.novell.com/show_bug.cgi?id=798769 https://bugzilla.novell.com/show_bug.cgi?id=798769#c0 Summary: LightDM not authorized to shut down/restart/suspend/hibernate any more Classification: openSUSE Product: openSUSE Factory Version: 12.3 Beta 1 Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: X11 Applications AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: gber@opensuse.org QAContact: qa-bugs@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:18.0) Gecko/20100101 Firefox/18.0 After native systemd support was enabled for DBus and related packages LightDM cannot shut down/restart/suspend/hibernate any more, more specifically calling SuspendAllowed, HibernateAllowed on org.freedesktop.UPower and CanRestart, CanStop on org.freedesktop.ConsoleKit.Manager from the greeter session always returns false. The following message appears in the logs: dbus-daemon[424]: dbus[424]: [system] Rejected send message, 2 matched rules; type="method_call", sender=":1.12" (uid=107 pid=2203 comm="/usr/sbin/lightdm-gtk-greeter ") interface="org.freedesktop.DBus.Properties" member="GetAll" error name="(unset)" requested_reply="0" destination=":1.3 " (uid=0 pid=439 comm="/usr/sbin/console-kit-daemon --no-daemon ") ConsoleKit has the greeter session marked as local and active, so according to our default polkit privileges these actions should be allowed. Also from within an Xfce session the above actions work fine and use the same upower/ConsoleKit DBus interfaces. Fedora seems to have the same problem and their LightDM maintainers have added new PolicyKit rules (see http://pkgs.fedoraproject.org/cgit/lightdm.git/tree/lightdm.rules) _unconditionally_ authorizing the lightdm user to use the above interfaces. However, in the accompanying discussion (https://bugzilla.redhat.com/show_bug.cgi?id=872797 https://bugzilla.redhat.com/show_bug.cgi?id=857254) there is no explanation for the bug either. Reproducible: Always -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
![](https://seccdn.libravatar.org/avatar/3035b38ff33cf86f480bb169b8500b80.jpg?s=120&d=mm&r=g)
https://bugzilla.novell.com/show_bug.cgi?id=798769
https://bugzilla.novell.com/show_bug.cgi?id=798769#c
Guido Berhörster
![](https://seccdn.libravatar.org/avatar/3035b38ff33cf86f480bb169b8500b80.jpg?s=120&d=mm&r=g)
https://bugzilla.novell.com/show_bug.cgi?id=798769
https://bugzilla.novell.com/show_bug.cgi?id=798769#c1
--- Comment #1 from Raymond Wooninck
![](https://seccdn.libravatar.org/avatar/3035b38ff33cf86f480bb169b8500b80.jpg?s=120&d=mm&r=g)
https://bugzilla.novell.com/show_bug.cgi?id=798769
https://bugzilla.novell.com/show_bug.cgi?id=798769#c2
--- Comment #2 from Raymond Wooninck
![](https://seccdn.libravatar.org/avatar/3035b38ff33cf86f480bb169b8500b80.jpg?s=120&d=mm&r=g)
https://bugzilla.novell.com/show_bug.cgi?id=798769
https://bugzilla.novell.com/show_bug.cgi?id=798769#c3
--- Comment #3 from Guido Berhörster
The new PolicyKit only doesn't really help. There is also a patch for ligthdm itself required to get it working. I have attached this patch (which comes also from Fedora) and I know that it works. Maybe not 100%, but for normal usage it does work. Some people in the opensuse-kde irc channel are using this patched lightdm and for them it works.
I've just added the policykit rules which Fedora is using that unconditionally allow the lightdm user to access the relevant upower/ConsoleKit methods, that should make things work again (please test X11:Utilities/lightdm). The Fedora patch doesn't (yet) add much benefit since it ports only a small fraction of the ConsoleKit usage, namely the shutdown/reboot calls, but not the multi-seat and session tracking code which would be a much larger undertaking. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
![](https://seccdn.libravatar.org/avatar/3035b38ff33cf86f480bb169b8500b80.jpg?s=120&d=mm&r=g)
https://bugzilla.novell.com/show_bug.cgi?id=798769
https://bugzilla.novell.com/show_bug.cgi?id=798769#c4
--- Comment #4 from Bernhard Wiedemann
![](https://seccdn.libravatar.org/avatar/3035b38ff33cf86f480bb169b8500b80.jpg?s=120&d=mm&r=g)
https://bugzilla.novell.com/show_bug.cgi?id=798769
https://bugzilla.novell.com/show_bug.cgi?id=798769#c5
Andreas Demmer
![](https://seccdn.libravatar.org/avatar/3035b38ff33cf86f480bb169b8500b80.jpg?s=120&d=mm&r=g)
https://bugzilla.novell.com/show_bug.cgi?id=798769
https://bugzilla.novell.com/show_bug.cgi?id=798769#c6
--- Comment #6 from Guido Berhörster
I have the patched lightdm installed but lightdm-kde-greeter still has disabled shutdown/restart/standby buttons.
I've just tried lightdm-kde-greeter from KDE:Distro:Factory on top of the latest Factory and it works fine. What version of polkit are you using, older versions required the libmozjs185 devel package for js rules to work? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
![](https://seccdn.libravatar.org/avatar/3035b38ff33cf86f480bb169b8500b80.jpg?s=120&d=mm&r=g)
https://bugzilla.novell.com/show_bug.cgi?id=798769
https://bugzilla.novell.com/show_bug.cgi?id=798769#c7
--- Comment #7 from Andreas Demmer
![](https://seccdn.libravatar.org/avatar/3035b38ff33cf86f480bb169b8500b80.jpg?s=120&d=mm&r=g)
https://bugzilla.novell.com/show_bug.cgi?id=798769
https://bugzilla.novell.com/show_bug.cgi?id=798769#c8
--- Comment #8 from Guido Berhörster
Ah, thx, after installing libmozjs, lightdm finally provides the previously disabled controls. :-)
I fixed the polkit package yesterday to recommend libmozjs185-1_0 so this shouldn't happen again. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
![](https://seccdn.libravatar.org/avatar/3035b38ff33cf86f480bb169b8500b80.jpg?s=120&d=mm&r=g)
https://bugzilla.novell.com/show_bug.cgi?id=798769
https://bugzilla.novell.com/show_bug.cgi?id=798769#c9
Guido Berhörster
participants (1)
-
bugzilla_noreply@novell.com