Package: openconnect
Version: 9.21-5
Severity: normal

Dear Maintainer, openconnect process constantly tries to probe pcscd, but
due to pcscd policy it is being denied access.

Ther is log spam several times per second:

    pcscd[4559]: 00103153 ../src/auth.c:166:IsClientAuthorized() Process 4663 
(user: 108) is NOT authorized for action: access_pcsc
    pcscd[4559]: 00000070 ../src/winscard_svc.c:361:ContextThread() Rejected 
unauthorized PC/SC client

pcscd Debian polkit policy allows only for connections from active session.
Maybe openconnect package needs to ship policy correction to allow its service 
user
access to pcscd.

-- System Information:
Debian Release: forky/sid
  APT prefers unstable
  APT policy: (900, 'unstable'), (300, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 7.1.12+deb14-amd64 (SMP w/8 CPU threads; PREEMPT)
Kernel taint flags: TAINT_AUX
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages openconnect depends on:
ii  libc6            2.43-5
ii  libgnutls30t64   3.8.13-1
ii  libopenconnect5  9.21-5
ii  libproxy1v5      0.5.12-1+b1
ii  libxml2-16       2.15.4+dfsg-1
ii  procps           2:4.0.7-1
ii  vpnc-scripts     0.1~git20220510-1.1

Versions of packages openconnect recommends:
ii  python3             3.14.7-3
pn  python3-asn1crypto  <none>
pn  python3-mechanize   <none>
pn  python3-netifaces   <none>

Versions of packages openconnect suggests:
ii  bash-completion  1:2.16.0-8
ii  xdg-utils        1.2.1-2

-- no debconf information

Reply via email to