Your message dated Mon, 05 Aug 2024 10:34:42 +0000
with message-id <[email protected]>
and subject line Bug#1077676: fixed in elogind 255.5-1debian3
has caused the Debian Bug report #1077676,
regarding pcscd: unprivileged users not authorized to access OpenPGP smart cards
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1077676: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1077676
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: pcscd
Version: 2.2.3-1
Severity: normal
Today I've rebooted my unattended-upgrades-enabled sid laptop after a
long time (almost 70 days) and discovered I could not access my smart
cards anymore.
from syslog:
pcscd: ../src/auth.c:145:IsClientAuthorized() Process 31413 (user: 1000) is NOT
authorized for action: access_pcsc
pcscd: ../src/winscard_svc.c:355:ContextThread() Rejected unauthorized PC/SC
client
I had to add a polkit rule in order to allow my unprivileged self to use
the cards:
> sudo cat /etc/polkit-1/rules.d/40-allow-pcscd.rules
polkit.addRule(function(action, subject) {
if (
subject.isInGroup("plugdev")
&& (
action.id === "org.debian.pcsc-lite.access_pcsc"
|| action.id === "org.debian.pcsc-lite.access_card"
)
) {
return polkit.Result.YES;
}
return polkit.Result.NOT_HANDLED;
});
Given the long time since the previous reboot, I don't know when the
problem has started or where it has originated.
Maybe pcscd has started being linked against polkit only recently? If
this is the case, I suggest shipping with the package a polkit rule
similar to the one above and adding a NEWS entry to warn the users. This
would particularly benefit users that depend on the smart card for
logging in.
Thanks,
Gian Piero.
-- System Information:
Debian Release: trixie/sid
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 6.9.12-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: OpenRC (via /run/openrc), PID 1: init
LSM: AppArmor: enabled
Versions of packages pcscd depends on:
ii libc6 2.39-6
ii libccid [pcsc-ifd-handler] 1.6.1-1
ii libglib2.0-0t64 2.80.4-1
ii libpcsclite1 2.2.3-1
ii libpolkit-gobject-1-0 124-3
ii libsystemd0 256.4-2
ii libudev1 256.4-2
pcscd recommends no packages.
Versions of packages pcscd suggests:
pn systemd <none>
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: elogind
Source-Version: 255.5-1debian3
Done: Mark Hindley <[email protected]>
We believe that the bug you reported is fixed in the latest version of
elogind, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Mark Hindley <[email protected]> (supplier of updated elogind package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 05 Aug 2024 10:57:36 +0100
Source: elogind
Architecture: source
Version: 255.5-1debian3
Distribution: unstable
Urgency: medium
Maintainer: Debian Ecosystem Init Diversity Team
<[email protected]>
Changed-By: Mark Hindley <[email protected]>
Closes: 1077676
Changes:
elogind (255.5-1debian3) unstable; urgency=medium
.
* d/elogind.init:
- start before $x-display-manager. (Closes: 1077676)
- fix typo in short description.
Checksums-Sha1:
13d5019c992097d33cfa22b1441b08dc4c00c9dd 2665 elogind_255.5-1debian3.dsc
898df8e113b78cf81ad452fc5306a03f9ec0cb9c 14500
elogind_255.5-1debian3.debian.tar.xz
e7af2250292648ec4c4a3f260cf967c8097e11f7 10902
elogind_255.5-1debian3_amd64.buildinfo
Checksums-Sha256:
750b8d9afe63977327e2114aac9e50fdb0f40467ab44f72456a1601370e81513 2665
elogind_255.5-1debian3.dsc
dc7bc3e3a65b87b44dc9f9cdfcd1905cbdd08238445f10e5d4cdb55286ba25e5 14500
elogind_255.5-1debian3.debian.tar.xz
644387e65ce5d99b3594d56b1c6552693abceb72f64cc3abca0f0d60a95dae64 10902
elogind_255.5-1debian3_amd64.buildinfo
Files:
fa92fbf0908ebc57e3c9f56901233b4a 2665 admin optional elogind_255.5-1debian3.dsc
71ea614f5144e7e7776e27ea5e8512f8 14500 admin optional
elogind_255.5-1debian3.debian.tar.xz
b10bb3ab2a831413eb8b87148b918357 10902 admin optional
elogind_255.5-1debian3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=XLKG
-----END PGP SIGNATURE-----
pgpTQoBgEfFTs.pgp
Description: PGP signature
--- End Message ---
