Mailinglist Archive: opensuse (3513 mails)

< Previous Next >
Re: [opensuse] Strange "PermissionDeniedByPolicy" Problem with 11.1
  • From: auxsvr@xxxxxxxxx
  • Date: Thu, 8 Jan 2009 13:08:46 +0200
  • Message-id: <200901081308.46693.auxsvr@xxxxxxxxx>
On Thursday 08 January 2009, Rainer Krienke wrote:
In betwenn I reinstalled the polkit-default-privs package
on the system where I have problems just as a try, even if I did not modify
the files contained in the package (/etc/polkit-default-
privs.localprivs.restrictive, and privs.standard). Now when I try to
hibernate the system it still does not work and polkit-auth still returns
no output but the error message has changed:

$ powersave -U
Error org.freedesktop.Hal.Device.PermissionDeniedByPolicy:
org.freedesktop.hal.power-management.hibernate auth_admin_keep_always <--
(action, result)

Check below first, solving this may be similar to the next one.

Next I looked in

/usr/share/PolicyKit/policy/org.freedesktop.hal.power-management.policy
there is this entry:

<action id="org.freedesktop.hal.power-management.hibernate">
<description>Hibernate the system</description>
<message>System policy prevents hibernating the system</message>
<defaults>
<allow_inactive>no</allow_inactive>
<allow_active>yes</allow_active>
</defaults>
</action>

This entry however is identicylly on both system: On the system where I can
say powersave -U (start hibernate) and on the system where I get the Error
message.

In /usr/share/PolicyKit/policy/org.freedesktop.hal.storage.policy there is
also an entry:

<action id="org.freedesktop.hal.storage.mount-removable">
<description>Mount file systems from removable drives.</description>
<message>System policy prevents mounting removable media</message>
<defaults>
<allow_inactive>no</allow_inactive>
<allow_active>yes</allow_active>
</defaults>
</action>

But when I try to access a USB stick via dolphin it tells me:
PermissionDeniedByPolicy: org.freedesktop.hal.storage.mount-removable
auth_admin_keep_always <-(action,result) and the usb stick is not displayed
in dolphin. And again on both systems the
org.freedesktop.hal.storage.policy file is identical on both systems.

For some reason (probably running SuSEconfig) policykit loses the permission
settings for removable storage. To fix it do "polkit-action --reset-defaults
org.freedesktop.hal.storage.mount-removable" as an authorized user (root). If
this doesn't work, maybe you should set appropriately the setgid/setuid bits
of the policykit executables and try again, an error message should direct you
accordingly.

I have really no idea whats going on. The system where policykit has
problems is a system with NIS running autofs running and without local
(non-system) users. Could this cause any trouble (it did not however from
suse8* to suse11.0, with generally identical installation) ?

In opensuse 11 the permissions for the policykit executables were incorrectly
set for the secure permissions level. Check bug
https://bugzilla.novell.com/show_bug.cgi?id=295341 (it's marked as WONTFIX,
however 11.1 includes the fix?!)

Thanks
Rainer

Hope this helps,
Peter

--
Rainer Krienke, Uni Koblenz, Rechenzentrum, A22, Universitaetsstrasse 1
56070 Koblenz, http://www.uni-koblenz.de/~krienke, Tel: +49261287 1312
PGP: http://www.uni-koblenz.de/~krienke/mypgp.html,Fax: +49261287 1001312


--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx

< Previous Next >
Follow Ups