Your message dated Wed, 29 Nov 2023 08:50:42 +0000
with message-id <e1r8ghk-000hfi...@fasolo.debian.org>
and subject line Bug#1050417: fixed in lightdm 1.32.0-4
has caused the Debian Bug report #1050417,
regarding lightdm-guest-session support (via Arctica Greeter) takes a long time
to startup X11 guest sessions
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1050417: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1050417
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: src:lightdm
Severity: normal
Version: 1.32.0-3
Tags: patch
Forwarded: https://github.com/canonical/lightdm/pull/319
For Debian Edu 12, I tested the various features of Arctica Greeter
(arctica-greeter src:pkg in Debian). The Arctica Greeter provides a
feature called guest session login. With this, users can log into a
host using one-time sessions. The guest user accounts gets created on
the fly on login and gets removed after the session. A password is not
required for guest session login.
In Debian 12, the login into an X11 desktop (such as MATE or Xfce4)
takes a long time to bring up the session. This delay is caused by a
missing apparmor rule in light.
diff --git a/data/apparmor/lightdm-guest-session.in
b/data/apparmor/lightdm-guest-session.in
index 3239c54b..f4938c7c 100644
--- a/data/apparmor/lightdm-guest-session.in
+++ b/data/apparmor/lightdm-guest-session.in
@@ -18,6 +18,7 @@
/usr/bin/sogou-qimpanel-watchdog ix,
/usr/bin/sogou-sys-notify ix,
/tmp/sogou-qimpanel:* rwl,
+ /run/user/*/ICEauthority-l l,
# Allow ibus
unix (bind, listen) type=stream addr="@tmp/ibus/*",
Here comes the description of the proposed patch:
data/apparmor/lightdm-guest-session.in: Allow l operation on
/run/user/*/ICEauthority-l.
This resolves long login delays into X11 guest sessions when using
Arctica Greeter (forked from Unity Greeter). While waiting for the
desktop to appear, the screen stays black and a non-WM'ed dialog box
appears on screen, saying: "Could not update ICEauthority file
/run/user/<guest-uid>/ICEauthority".
When testing with MATE desktop, apparmor denies esp. creating this link
operation:
operation="link" class="file" profile="<path-to>/lightdm-guest-session"
name="/run/user/997/ICEauthority-l" pid=<pid> comm="mate-session"
requested_mask="l" denied_mask="l" fsuid=<fsuid> ouid=<ouid>
target="/run/user/<uidnumber>/ICEauthority-c"
Similar in Xfce4:
operation="link" class="file" profile="<path-to>/lightdm-guest-session"
name="/run/user/997/ICEauthority-l" pid=<pid> comm="iceauth"
requested_mask="l" denied_mask="l" fsuid=<fsuid> ouid=<ouid>
target="/run/user/<uidnumber>/ICEauthority-c"
It would be awesome if this could get resolved in the near future in
Debian unstable and Debian bookworm. I can provide some help with
these uploads if wanted by the maintainers.
Thanks+Greets,
Mike
--
mike gabriel aka sunweaver (Debian Developer)
mobile: +49 (1520) 1976 148
landline: +49 (4351) 486 14 27
GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22 0782 9AF4 6B30 2577 1B31
mail: sunwea...@debian.org, http://sunweavers.net
>From 206320128f9636b814af76230ad64ed3b5e36fb8 Mon Sep 17 00:00:00 2001
From: Mike Gabriel <mike.gabr...@das-netzwerkteam.de>
Date: Thu, 24 Aug 2023 11:19:02 +0200
Subject: [PATCH] data/apparmor/lightdm-guest-session.in: Allow l operation on
/run/user/*/ICEauthority-l.
This resolves long login delays into X11 guest sessions when using
Arctica Greeter (forked from Unity Greeter). While waiting for the
desktop to appear, the screen stays black and a non-WM'ed dialog box
appears on screen, saying: "Could not update ICEauthority file
/run/user/<guest-uid>/ICEauthority".
When testing with MATE desktop, apparmor denies esp. creating this link
operation:
operation="link" class="file" profile="<path-to>/lightdm-guest-session"
name="/run/user/997/ICEauthority-l" pid=<pid> comm="mate-session"
requested_mask="l" denied_mask="l" fsuid=<fsuid> ouid=<ouid>
target="/run/user/<uidnumber>/ICEauthority-c"
Similar in Xfce4:
operation="link" class="file" profile="<path-to>/lightdm-guest-session"
name="/run/user/997/ICEauthority-l" pid=<pid> comm="iceauth"
requested_mask="l" denied_mask="l" fsuid=<fsuid> ouid=<ouid>
target="/run/user/<uidnumber>/ICEauthority-c"
Signed-off-by: Mike Gabriel <mike.gabr...@das-netzwerkteam.de>
---
data/apparmor/lightdm-guest-session.in | 1 +
1 file changed, 1 insertion(+)
diff --git a/data/apparmor/lightdm-guest-session.in
b/data/apparmor/lightdm-guest-session.in
index 3239c54b..f4938c7c 100644
--- a/data/apparmor/lightdm-guest-session.in
+++ b/data/apparmor/lightdm-guest-session.in
@@ -18,6 +18,7 @@
/usr/bin/sogou-qimpanel-watchdog ix,
/usr/bin/sogou-sys-notify ix,
/tmp/sogou-qimpanel:* rwl,
+ /run/user/*/ICEauthority-l l,
# Allow ibus
unix (bind, listen) type=stream addr="@tmp/ibus/*",
--
2.39.2
pgpSFNBec_JND.pgp
Description: Digitale PGP-Signatur
--- End Message ---
--- Begin Message ---
Source: lightdm
Source-Version: 1.32.0-4
Done: Yves-Alexis Perez <cor...@debian.org>
We believe that the bug you reported is fixed in the latest version of
lightdm, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1050...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Yves-Alexis Perez <cor...@debian.org> (supplier of updated lightdm package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 28 Nov 2023 22:12:33 +0100
Source: lightdm
Binary: gir1.2-lightdm-1 liblightdm-gobject-1-0 liblightdm-gobject-1-0-dbgsym
liblightdm-gobject-dev liblightdm-qt5-3-0 liblightdm-qt5-3-0-dbgsym
liblightdm-qt5-3-dev lightdm lightdm-dbgsym lightdm-vala
Architecture: source amd64
Version: 1.32.0-4
Distribution: unstable
Urgency: medium
Maintainer: Debian Xfce Maintainers <debian-xfce@lists.debian.org>
Changed-By: Yves-Alexis Perez <cor...@debian.org>
Description:
gir1.2-lightdm-1 - Typelib file for liblightdm-1
liblightdm-gobject-1-0 - simple display manager (GObject library)
liblightdm-gobject-dev - simple display manager (GObject development files)
liblightdm-qt5-3-0 - LightDM Qt 5 client library
liblightdm-qt5-3-dev - LightDM Qt 5 client library (development files)
lightdm - simple display manager
lightdm-vala - simple display manager (Vala files)
Closes: 1050417
Changes:
lightdm (1.32.0-4) unstable; urgency=medium
.
* d/lightdm.maintscript: remove /e/d/s/org.freedesktop.DisplayManager.conf
properly
* d/patches: fix guest session long login by updating AppArmor profile
(Closes: #1050417)
Checksums-Sha1:
cda5f57668bafb754c2da9d1c7f5e8ad3f509666 2496 lightdm_1.32.0-4.dsc
ff7e318838d9bfb7003e3f8a067c7426e60d81aa 39076 lightdm_1.32.0-4.debian.tar.xz
fcf129af1c7d59fa6d6148e7673c00fe0305be5c 24428
gir1.2-lightdm-1_1.32.0-4_amd64.deb
57f0c2118c2dc01852b13e46715f95e339e936bd 140640
liblightdm-gobject-1-0-dbgsym_1.32.0-4_amd64.deb
2fe003ab8506cd32bb71b27e86f8598e7d760ea3 56384
liblightdm-gobject-1-0_1.32.0-4_amd64.deb
e054f1583109cb639753a74ced7b51ced0a97001 95236
liblightdm-gobject-dev_1.32.0-4_amd64.deb
247f7d9b2a204faa8f8d91f5f140a9b51d854681 493768
liblightdm-qt5-3-0-dbgsym_1.32.0-4_amd64.deb
785166d6549304418ada53c7442ee0c084dc2f38 41476
liblightdm-qt5-3-0_1.32.0-4_amd64.deb
ec842af48b292ee76107a0284bad992638c0cb88 43824
liblightdm-qt5-3-dev_1.32.0-4_amd64.deb
1b10ac1d8282f2fa7a0999ee475a04108ca60826 388076
lightdm-dbgsym_1.32.0-4_amd64.deb
d8ff33682cb5a4aabd8ba483d29d08824ea50cbb 22264 lightdm-vala_1.32.0-4_amd64.deb
b0797ed09eec433dd191a6b518c7e113c8466399 19989 lightdm_1.32.0-4_amd64.buildinfo
9dfd5a1659196c3dc99f6cf46290470d71757f22 162788 lightdm_1.32.0-4_amd64.deb
Checksums-Sha256:
dd7622513eef4263f02c3aa165457bffa4be203c729935f12ed55ad1b865a57b 2496
lightdm_1.32.0-4.dsc
d8bf83f2054bcbe4e09638e66e1207e604172e9761971520ca1ada9b3134cc15 39076
lightdm_1.32.0-4.debian.tar.xz
e44ae553f02fb327c0aab040aba90f62994a0cd12d8713d8915753c174bde106 24428
gir1.2-lightdm-1_1.32.0-4_amd64.deb
38c3537b51680f70bb10bd20f07fcb2af93455225f91a6430305ba490845f9d6 140640
liblightdm-gobject-1-0-dbgsym_1.32.0-4_amd64.deb
9901e33eea7da41ea861194f103d7a862c56ab56da9ce9a7111c619e2c171958 56384
liblightdm-gobject-1-0_1.32.0-4_amd64.deb
4ad128b7a33fb2d04b8504da26b997923536c13104cd397a1e604d5e2f566085 95236
liblightdm-gobject-dev_1.32.0-4_amd64.deb
cc52519955b847d5dbcf0c311ecb5cf35c4f47c119a3cdc4139cf449a312a6d1 493768
liblightdm-qt5-3-0-dbgsym_1.32.0-4_amd64.deb
fc7a0ff34130895e67a2f54bfdb85f5c696e67a1daf77e5049efbe6c533fa3aa 41476
liblightdm-qt5-3-0_1.32.0-4_amd64.deb
f335738ac1ed48ba29689c609d6bfa9a8e3226f9db6eb9c4911e7c45aed92fe0 43824
liblightdm-qt5-3-dev_1.32.0-4_amd64.deb
52faac3d1153e944e2dbbc83ee167f22de4f317b08fe7bba57d713915a925bb4 388076
lightdm-dbgsym_1.32.0-4_amd64.deb
c80a7ddd3b31131361ac700a4afd3829a30845a1e6c5efa96d0f4c7ab9dde7c8 22264
lightdm-vala_1.32.0-4_amd64.deb
ccc16b0114f163e019fd05ebf8446db658b2afb2ae0a19b5f43e068c3b70a7f0 19989
lightdm_1.32.0-4_amd64.buildinfo
84c9daeb3cc311c073074eace255024beb22ee25bbb5f66ca77b909b1e7591fc 162788
lightdm_1.32.0-4_amd64.deb
Files:
d1a100434f3a145b1ce2722f404f341b 2496 x11 optional lightdm_1.32.0-4.dsc
0e0ba78a2fe1114a09d8b25423dc55cd 39076 x11 optional
lightdm_1.32.0-4.debian.tar.xz
cfd7746e5291f1088e203b36ec6a51de 24428 introspection optional
gir1.2-lightdm-1_1.32.0-4_amd64.deb
d52142211a47044766eccc5979a3ee71 140640 debug optional
liblightdm-gobject-1-0-dbgsym_1.32.0-4_amd64.deb
773ccf132050698f7eb4261103428467 56384 libs optional
liblightdm-gobject-1-0_1.32.0-4_amd64.deb
13a4beb57ad938c5ff5e8a59ab8d75db 95236 libdevel optional
liblightdm-gobject-dev_1.32.0-4_amd64.deb
11b40e6e119d8eb700431aef8f64d0e4 493768 debug optional
liblightdm-qt5-3-0-dbgsym_1.32.0-4_amd64.deb
1767fa20cdb8c05b60a4e15ea55d25c3 41476 libs optional
liblightdm-qt5-3-0_1.32.0-4_amd64.deb
e1fc9ff74e4c2e3a79789bfcef141c54 43824 libdevel optional
liblightdm-qt5-3-dev_1.32.0-4_amd64.deb
16a74904d6d12fa92758f9020d861ea1 388076 debug optional
lightdm-dbgsym_1.32.0-4_amd64.deb
6eed5d3474a54f6d7cfbc9abfc67f18f 22264 x11 optional
lightdm-vala_1.32.0-4_amd64.deb
685c3cd0edd313633a1274871d4c72d8 19989 x11 optional
lightdm_1.32.0-4_amd64.buildinfo
16f39c3d3c82e47b16e68b61b7ea19b3 162788 x11 optional lightdm_1.32.0-4_amd64.deb
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCgAdFiEE8vi34Qgfo83x35gF3rYcyPpXRFsFAmVm9WcACgkQ3rYcyPpX
RFvjjAf9GIWsXZR8VPziepvKa/pb81lZdlBaQhXnbp/nza0anYiZsNXVeoEOI4vD
Ba6mCV9ZK2e9EYuHoQtCv1LG77LEp6muwFOvKpuEJxDo3VoUO6xTL3u6MYWaf5c4
Lh3VTxfrxFUoE38taPY5haC3lCo67M6CPdyp4jzpY7HacyKV1mKgG1UpxD8xBMoF
HZmjh3wm5q53kdk6sq8Pn/6kn3gBzHTGNkIikaTp3ViZBhkoXXCe1OY8B7PXiPs4
OR8qUphKxAA0HQ9Kme+QTXRkksFb3Zu4BZbPWoNrWs6dHKPwN+6Cqua8qjYRaiU9
sR9lRNCAxDknwjjoV0h/YSIsigLr0w==
=CNw8
-----END PGP SIGNATURE-----
--- End Message ---
