Bug#1076728: elogind: privileged operation with polkit fails

Mon Jul 22 19:06:56 BST 2024

Package: elogind
Version: 255.5-1debian2
Severity: important
X-Debbugs-Cc: plorenzo at disroot.org

Hello Mark,

with elogind linked to libsystemd0 privileged operations with polkit
no longer work, example:

* reboot, shutdown, suspend via option in menù/panel of desktop
* mounting a usb stick with the app provided by desktop panels
* managing network with panels app such as wicd or similar

all fails with something like: dbus error interactive authentication required

this is a regression, it worked with elogind linked to libelogind.
Since nobody reported this, I initially thought that I had some kind of
old configuration that caused this, maybe something in /etc/pam.d .
However I upgraded another system few days ago and it as the same issue.

To narrow the problem I tested the following configurations, without
success:

* switch and reboot into sysvinit (I use runit);
* install xfce4 desktop (I use LxQT);
* change display manager, tested sddm and lightdm
  (I use slim)
* create a new user 'testusr' and start the desktop with it

none of the above worked.

in the sddm login screen there are buttons to reboot/shutdown, and
surprisingly they worked; lightdm screen has similar buttons and
they don't work.
when I login with 'testusr' it has no access to audio devices; looking
at elogind logs I noticed that it no longer does acl (my user 'lorenzo'
is a member of audio/video/input group so I didn't notice this earlier)

overall it seems that comunication between elogind and other software
(polkit for auth and udev for acl) is broken.

Logs below

* attempt to reboot with lxqt desktop/panel
lxqt-leave --suspend
systemd: "CanSuspend" = "challenge"
** Dbus error **************************
Error name  "org.freedesktop.DBus.Error.InteractiveAuthorizationRequired"
Error msg   "Interactive authentication required."
****************************************
systemd: "Suspend" = "Interactive authentication required."
** Dbus error **************************
Error name  "org.freedesktop.DBus.Error.InvalidArgs"
Error msg   "No such interface “org.freedesktop.DBus.Properties”"
****************************************
dbusCall: QDBusInterface is invalid "org.freedesktop.ConsoleKit" "/org/freedesktop/ConsoleKit/Manager" "org.freedesktop.ConsoleKit.Manager" "CanSuspend"

* elogind log

2024-07-22_07:08:36.18057 ok: run: dbus: (pid 1957) 9s
2024-07-22_07:08:36.43878 invoke-run: starting elogind
2024-07-22_07:08:36.65483 New seat seat0.
2024-07-22_07:08:36.66109 Watching system buttons on /dev/input/event5 (Power Button)
2024-07-22_07:08:36.66206 Watching system buttons on /dev/input/event3 (Power Button)
2024-07-22_07:08:36.66213 Watching system buttons on /dev/input/event4 (Lid Switch)
2024-07-22_07:08:36.66498 Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard)
2024-07-22_07:08:36.66500 Watching system buttons on /dev/input/event14 (ACPI Virtual Keyboard Device)
2024-07-22_07:08:36.66502 Watching system buttons on /dev/input/event7 (Toshiba input device)
2024-07-22_07:09:00.80899 New session 1 of user sddm.
2024-07-22_07:09:14.35003 New session 2 of user lorenzo.
2024-07-22_07:09:15.14465 Removed session 1.
2024-07-22_12:50:11.09704 Removed session 2.
2024-07-22_12:50:12.24471 New session 3 of user sddm.
2024-07-22_12:50:57.37346 New session 4 of user lorenzo.
2024-07-22_12:50:57.40762 Removed session 3.

 loginctl
SESSION  UID USER    SEAT  TTY  STATE  IDLE SINCE
      4 1000 lorenzo seat0 tty8 active no   -    

1 sessions listed.

* dbus log

2024-07-22_07:08:29.91397 invoke-run: starting dbus
2024-07-22_07:08:37.83411 dbus-daemon[1957]: [system] Activating service name='org.freedesktop.login1' requested by ':1.0' (uid=0 pid=2383 comm="loginctl show-seat seat0") (using servicehelper)
2024-07-22_07:08:37.85794 dbus-daemon[1957]: [system] Successfully activated service 'org.freedesktop.login1'
2024-07-22_07:08:38.58613 dbus-daemon[1957]: [system] Activating service name='org.freedesktop.ColorManager' requested by ':1.4' (uid=0 pid=2149 comm="/usr/sbin/cupsd -f") (using servicehelper)
2024-07-22_07:08:40.35231 
2024-07-22_07:08:40.35237 (colord:2500): Cd-WARNING **: 09:08:40.352: failed to get edid data: EDID length is too small
2024-07-22_07:08:40.60447 dbus-daemon[1957]: [system] Successfully activated service 'org.freedesktop.ColorManager'
2024-07-22_07:09:19.71040 dbus-daemon[1957]: [system] Activating service name='org.freedesktop.RealtimeKit1' requested by ':1.17' (uid=1000 pid=7974 comm="/usr/libexec/xdg-desktop-portal") (using servicehelper)
2024-07-22_07:09:19.71537 dbus-daemon[1957]: [system] Successfully activated service 'org.freedesktop.RealtimeKit1'
2024-07-22_07:09:20.45727 dbus-daemon[1957]: [system] Activating service name='org.freedesktop.PolicyKit1' requested by ':1.2' (uid=0 pid=2153 comm="/usr/libexec/elogind") (using servicehelper)
2024-07-22_07:09:20.54338 dbus-daemon[1957]: [system] Successfully activated service 'org.freedesktop.PolicyKit1'
2024-07-22_07:09:26.39955 dbus-daemon[1957]: [system] Activating service name='org.freedesktop.UDisks2' requested by ':1.45' (uid=1000 pid=8308 comm="/usr/libexec/gvfs-udisks2-volume-monitor") (using servicehelper)
2024-07-22_07:09:26.60658 udisks-Message: 09:09:26.606: udisks daemon version 2.10.1 starting
2024-07-22_07:09:27.81591 dbus-daemon[1957]: [system] Successfully activated service 'org.freedesktop.UDisks2'
2024-07-22_07:09:27.89706 udisks-Message: 09:09:27.896: Acquired the name org.freedesktop.UDisks2 on the system message bus
2024-07-22_07:09:32.67861 dbus-daemon[1957]: [system] Activating service name='org.freedesktop.UPower' requested by ':1.49' (uid=1000 pid=8169 comm="/usr/bin/lxqt-panel") (using servicehelper)
2024-07-22_07:09:33.06034 dbus-daemon[1957]: [system] Successfully activated service 'org.freedesktop.UPower'

let me know if you need other info

Lorenzo

-- System Information:
Debian Release: trixie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 5.7.0-1-amd64 (SMP w/4 CPU threads)
Kernel taint flags: TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: runit (via /run/runit.stopit)

Versions of packages elogind depends on:
ii  dbus                 1.14.10-4+b1
ii  debconf              1.5.87
ii  init-system-helpers  1.66
ii  libacl1              2.3.2-2
ii  libc6                2.39-4
ii  libcap2              1:2.66-5
ii  libmount1            2.40.2-1
ii  libpam0g             1.5.3-7
ii  libselinux1          3.5-2+b3
ii  libsystemd0          256.2-1
ii  libudev1             256.2-1

Versions of packages elogind recommends:
ii  libpam-elogind  255.5-1debian2
ii  polkitd         124-3

elogind suggests no packages.

-- no debconf information