Bug#680264: nodm: ConsoleKit fails to recognize the current session as local
Package: nodm Version: 0.11-1.3 Followup-For: Bug #680264 I found information about this bug from year 2010 and it still exists! It seems to be a combination the session not being local and/or not being active. As I understand, the session needs to be local and active to be validated correct and to get access to the priviledge. Missing priviledges are shutdown, hibernate, suspend, but also mount harddisks and usb devices. I found a workaround for suspend, shutdown and hibernate, by setting up a localauthority file in /etc/polkit-1 (knowing that this is not the correct way to get it done). I do not have a workaround for mounting and I expect, that there will be more problems because the session is not validated as it should be. Does anybody know a solution or at least a workaround for mounting? Thanks alot, also for all the other work! -- System Information: Debian Release: 7.8 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: i386 (i686) Kernel: Linux 3.2.0-4-686-pae (SMP w/2 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages nodm depends on: ii debconf [debconf-2.0] 1.5.49 ii libc6 2.13-38+deb7u8 ii libpam0g 1.1.3-7.1 ii libx11-6 2:1.5.0-1+deb7u1 ii x11-common 1:7.7+3~deb7u1 ii x11-xserver-utils 7.7~3 nodm recommends no packages. nodm suggests no packages. -- debconf information: nodm/min_session_time: 60 nodm/enabled: false nodm/xsession: /etc/X11/Xsession nodm/x_options: -nolisten tcp nodm/first_vt: 7 nodm/user: root -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#680264: nodm: ConsoleKit fails to recognize the current session as local
TL;DR: no such luck here. lightdm seems to work better. On Wed, Jul 04, 2012 at 08:23:06PM +0200, Emanuele Aina wrote: tag 680264 patch thanks Stacking a pam_ck_connector.so with x11 support after enabling session auditing with pam_loginuid.so and before the one in common-session (which has the nox11 flag set) fixes the issue. I'd just like to report that this patch does not work for me. I tried getting a nodm user to be able to mount a USB storage device through udisks (on Wheezy). nodm's user fails to work. Lightdm seems to work well. I also tried copying lightdm's autologin pam file to nodm, but no luck there. -- Emanuele diff --git a/debian/nodm.pam b/debian/nodm.pam index 77ad6f6..6f68f35 100644 --- a/debian/nodm.pam +++ b/debian/nodm.pam @@ -18,7 +18,13 @@ session required pam_env.so readenv=1 envfile=/etc/default/locale # # (Replaces the use of /etc/limits in old login) sessionrequired pam_limits.so -# Standard Un*x account and session +# Standard Un*x account @include common-account @include common-password + +# Enable ConsoleKit integration +session optional pam_loginuid.so +session optional pam_ck_connector.so + +# Standard Un*x session @include common-session And here is lightdm-autologin pam file: # egrep -v '^(#|$)' /etc/pam.d/lightdm-autologin authrequisite pam_nologin.so authrequiredpam_env.so readenv=1 authrequiredpam_env.so readenv=1 envfile=/etc/default/locale authrequiredpam_permit.so @include common-account session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so close session requiredpam_limits.so session requiredpam_loginuid.so @include common-session session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so open @include common-password I use systemd. Also: ii libpam-ck-conn 0.4.5-3.1armhf ii libpam-systemd 44-11+deb7u4 armhf -- Tzafrir Cohen icq#16849755 jabber:tzafrir.co...@xorcom.com +972-50-7952406 mailto:tzafrir.co...@xorcom.com http://www.xorcom.com -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#680264: nodm: ConsoleKit fails to recognize the current session as local
Package: nodm Version: 0.11-1.2 Severity: normal ConsoleKit is unable to verify that the current session is local (check with ck-list-sessions) and its policies prevent the user from mounting usb sticks, shutting down the system, etc. References: https://bugs.launchpad.net/ubuntu/+source/nodm/+bug/873975 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=597937#71 https://bugzilla.redhat.com/show_bug.cgi?id=657979 -- Emanuele -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#680264: nodm: ConsoleKit fails to recognize the current session as local
tag 680264 patch thanks Stacking a pam_ck_connector.so with x11 support after enabling session auditing with pam_loginuid.so and before the one in common-session (which has the nox11 flag set) fixes the issue. -- Emanuele diff --git a/debian/nodm.pam b/debian/nodm.pam index 77ad6f6..6f68f35 100644 --- a/debian/nodm.pam +++ b/debian/nodm.pam @@ -18,7 +18,13 @@ session required pam_env.so readenv=1 envfile=/etc/default/locale # # (Replaces the use of /etc/limits in old login) sessionrequired pam_limits.so -# Standard Un*x account and session +# Standard Un*x account @include common-account @include common-password + +# Enable ConsoleKit integration +session optional pam_loginuid.so +session optional pam_ck_connector.so + +# Standard Un*x session @include common-session
