Public bug reported:

The following config file in
`/etc/polkit-1/localauthority.conf.d/02-allow-colord.conf` can cause a
segfault in `polkitd`.

```
polkit.addRule(function(action, subject) {
if ((action.id == "org.freedesktop.color-manager.create-device" ||
action.id == "org.freedesktop.color-manager.create-profile" ||
action.id == "org.freedesktop.color-manager.delete-device" ||
action.id == "org.freedesktop.color-manager.delete-profile" ||
action.id == "org.freedesktop.color-manager.modify-device" ||
action.id == "org.freedesktop.color-manager.modify-profile") &&
subject.isInGroup("{group}")) {
return polkit.Result.YES;
}
});
```

1. As normal user: `systemctl restart cron.service`
2. Error message `Failed to restart cron.service: Message recipient 
disconnected from message bus without replying`
3. `dmesg` reports: 

```
   58.003893] polkitd[963]: segfault at 8 ip 0000558a96789856 sp 
00007ffda31e45f0 error 4 in   polkitd[558a96784000+f000]
[   58.003899] Code: 50 c7 ff ff 4d 89 e5 48 89 44 24 08 eb 53 66 0f 1f 44 00 
00 48 8b 44 24 10 48 89 e9 be 10 00 00 00 31 ff 48 8d 15 0b af 00 00 <4c> 8b 40 
08 31 c0 e8 af cb ff ff 48 8b 7c 24 10 e8 65 c9 ff ff 4c
``

If you remove the 02-allow-colord.conf the segfault goes away and you
are normally prompted for a password. You can also find a couple of
references in the internet, e.g http://c-nergy.be/blog/?p=12043.

** Affects: policykit-1 (Ubuntu)
     Importance: Undecided
         Status: New

** Attachment added: "crash file"
   
https://bugs.launchpad.net/bugs/1959103/+attachment/5557607/+files/_usr_lib_policykit-1_polkitd.0.crash

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to policykit-1 in Ubuntu.
https://bugs.launchpad.net/bugs/1959103

Title:
  polkitd crashes with segfault with specific config file

Status in policykit-1 package in Ubuntu:
  New

Bug description:
  The following config file in
  `/etc/polkit-1/localauthority.conf.d/02-allow-colord.conf` can cause a
  segfault in `polkitd`.

  ```
  polkit.addRule(function(action, subject) {
  if ((action.id == "org.freedesktop.color-manager.create-device" ||
  action.id == "org.freedesktop.color-manager.create-profile" ||
  action.id == "org.freedesktop.color-manager.delete-device" ||
  action.id == "org.freedesktop.color-manager.delete-profile" ||
  action.id == "org.freedesktop.color-manager.modify-device" ||
  action.id == "org.freedesktop.color-manager.modify-profile") &&
  subject.isInGroup("{group}")) {
  return polkit.Result.YES;
  }
  });
  ```

  1. As normal user: `systemctl restart cron.service`
  2. Error message `Failed to restart cron.service: Message recipient 
disconnected from message bus without replying`
  3. `dmesg` reports: 

  ```
     58.003893] polkitd[963]: segfault at 8 ip 0000558a96789856 sp 
00007ffda31e45f0 error 4 in   polkitd[558a96784000+f000]
  [   58.003899] Code: 50 c7 ff ff 4d 89 e5 48 89 44 24 08 eb 53 66 0f 1f 44 00 
00 48 8b 44 24 10 48 89 e9 be 10 00 00 00 31 ff 48 8d 15 0b af 00 00 <4c> 8b 40 
08 31 c0 e8 af cb ff ff 48 8b 7c 24 10 e8 65 c9 ff ff 4c
  ``

  If you remove the 02-allow-colord.conf the segfault goes away and you
  are normally prompted for a password. You can also find a couple of
  references in the internet, e.g http://c-nergy.be/blog/?p=12043.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/policykit-1/+bug/1959103/+subscriptions


-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to