On 4/6/22 22:14, Lyndon Brown wrote:
I installed this update to my Sid install today and now if my Gnome session gets locked, after unlocking I get presented with a 'this usbguard action needs authorisation' password prompt.I dismissed it and immediately got a second, which I also dismissed.
Yeah, this is due to the fix to CVE-2019-25058 which allowed accessing usbguards D-Bus methods without authorization (see also the bug report on https://bugs.archlinux.org/task/73974), and which is now fixed. Therefore Gnome needs authorization for some actions it didn't need it before. There is also an upstream bug regarding the default polkit policy for some of those actions: https://github.com/USBGuard/usbguard/issues/544
We could ship a polkit rules file in Debian allowing the read operations without authorization, which limits the password prompts to one (usbguards apply-policy operation) but that's still annoying. My hope is that gnome-settings-daemon finds a way to apply the policy without user interaction...
cheers, Birger
OpenPGP_0xCB06EA7B78DBE151_and_old_rev.asc
Description: OpenPGP public key
OpenPGP_signature
Description: OpenPGP digital signature
