Package: polkitd
Version: 122-1
Severity: important
X-Debbugs-Cc: s...@robots.org.uk
Since updating to 122, polkit authentication prompts ask me to
authenticate as "Administrator" (root?) rather than my own user.
Here's my configuration:
# cat /etc/polkit-1/localauthority.conf.d/60-sam.conf
[Configuration]
AdminIdentities=unix-user:sam.mor...@domain.example.com
# pkla-admin-identities
unix-user:sam.mor...@domain.example.com
So it looks like polkitd-pkla still recognizes me as an administrator.
pkla-check-authorization however indicates that maybe my user is allowed
to connect/disconnect pre-existing network connections but is _not_
allowed to edit network connections. So maybe the problem is with
polkitd-pkla after all?
# pkla-check-authorization sam.mor...@domain.example.com true true
org.freedesktop.NetworkManager.network-control
yes
# pkla-check-authorization sam.mor...@domain.example.com true true
org.freedesktop.NetworkManager.settings.modify.system; echo $?
0
For the end to end test I'm running this command, which prompts me for
root's password rather than my own.
$ pkcheck -a org.freedesktop.NetworkManager.settings.modify.system -u -p $$
polkit\56dismissed=true
polkit\56retains_authorization_after_challenge=true
Authentication request was dismissed.
So based on that it's not clear to me whether the problem lies in
polkitd or polkitd-pkla...
Not sure whether the problem is with polkit itself or polkitd-pkla.
-- System Information:
Debian Release: 11.5
APT prefers stable-updates
APT policy: (570, 'stable-updates'), (570, 'stable-security'), (570,
'stable-debug'), (570, 'stable'), (550, 'testing-debug'), (550, 'testing'),
(530, 'unstable-debug'), (530, 'unstable'), (1, 'experimental-debug'), (1,
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 5.19.0-1-amd64 (SMP w/4 CPU threads; PREEMPT)
Kernel taint flags: TAINT_USER
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8),
LANGUAGE=en_GB:en
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: SELinux: enabled - Mode: Permissive - Policy name: default
Versions of packages policykit-1 depends on:
ii pkexec 122-1
ii polkitd 122-1
Versions of packages policykit-1 recommends:
ii polkitd-pkla 122-1
policykit-1 suggests no packages.
Versions of packages polkitd depends on:
ii adduser 3.118
ii dbus [default-dbus-system-bus] 1.12.24-0+deb11u1
ii libc6 2.35-4
ii libduktape207 2.7.0-1+b1
ii libexpat1 2.2.10-2+deb11u5
ii libglib2.0-0 2.74.1-1
ii libpam-systemd [logind] 251.6-1
ii libpam0g 1.4.0-9+deb11u1
ii libpolkit-agent-1-0 122-1
ii libpolkit-gobject-1-0 122-1
ii libsystemd0 251.6-1
ii systemd [systemd-sysusers] 251.6-1
ii xml-core 0.18+nmu1
Versions of packages polkitd suggests:
ii polkitd-pkla 122-1
-- no debconf information
_______________________________________________
Pkg-utopia-maintainers mailing list
Pkg-utopia-maintainers@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-utopia-maintainers
