[Touch-packages] [Bug 1784964] Re: Regression due to CVE-2018-1116 (processes not inheriting user's groups )

2018-08-02 Thread TJ
Just noticed in $HOME/.xsession-errors the following: (polkit-gnome-authentication-agent-1:4029): polkit-gnome-1-WARNING **: 15:04:54.498: Failed to register client: GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name org.gnome.SessionManager was not provided by any .service files

[Touch-packages] [Bug 1784964] Re: Regression due to CVE-2018-1116 (processes not inheriting user's groups )

2018-08-02 Thread TJ
And this is the same output using the 'correct' scenario by logging into the TTY console first. cmdline: -bash Tgid: 3516 Ngid: 0 Pid:3516 PPid: 3488 TracerPid: 0 Uid:1000100010001000 Gid:1000100010001000 Groups: 0 4 6 7 20 24 25 27 29 44 46 100 108

[Touch-packages] [Bug 1784964] Re: Regression due to CVE-2018-1116 (processes not inheriting user's groups )

2018-08-02 Thread TJ
Just noticed the PID tree trace didn't match on the Group: from proc/$PID/status. Here's the corrected output. $ pid=$BASHPID; while [[ $pid -ne 0 ]]; do ids=$(grep '^\(.*id:\|Group\)' /proc/$pid/status); echo -e "cmdline: $(cat /proc/$pid/cmdline) \n $ids" 2>/dev/null; pid=$(echo $ids | awk

[Touch-packages] [Bug 1784964] Re: Regression due to CVE-2018-1116 (processes not inheriting user's groups )

2018-08-02 Thread TJ
Marc: regular stand-alone install, local authentication via passwd/shadow/group. Here's what I see with the 'broken' sequence GUI terminal:  tj  ~  id uid=1000(tj) gid=1000(tj) groups=1000(tj)  tj  ~  groups tj  tj  ~  groups $USER tj : tj root adm disk lp dialout cdrom floppy sudo audio

[Touch-packages] [Bug 1784964] Re: Regression due to CVE-2018-1116 (processes not inheriting user's groups )

2018-08-02 Thread TJ
Marc: Are you using gdm to log into the graphical session? lightdm - this is Xubuntu -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to policykit-1 in Ubuntu. https://bugs.launchpad.net/bugs/1784964 Title: Regression due to

[Touch-packages] [Bug 1784964] Re: Regression due to CVE-2018-1116 (processes not inheriting user's groups )

2018-08-02 Thread TJ
I am beginning to suspect this is an systemd-logind issue. I've been thinking it's logind but just checked the upgrade packages to/from versions and cross-checked against the changelogs. ? systemd:amd64 (237-3ubuntu10, 237-3ubuntu10.3), And we have a major change to logind included in that:

[Touch-packages] [Bug 1784964] Re: Regression due to CVE-2018-1116 (processes not inheriting user's groups )

2018-08-02 Thread H Geerts
I experience this same behaviour using lightdm + KDE plasma. I've also tested lightdm + unity which did not trigger this behaviour. This install uses local passwd/shadow/group files. Both tests were after a fresh boot. harm@harm-XPS-13-9360:~$ lsb_release -a; cat /proc/version No LSB modules are

[Touch-packages] [Bug 1784964] Re: Regression due to CVE-2018-1116 (processes not inheriting user's groups )

2018-08-02 Thread Marc Deslauriers
Are you using local passwd/shadow/group files, or are you authenticating using something else? -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to policykit-1 in Ubuntu. https://bugs.launchpad.net/bugs/1784964 Title:

[Touch-packages] [Bug 1784964] Re: Regression due to CVE-2018-1116 (processes not inheriting user's groups )

2018-08-02 Thread Marc Deslauriers
What's the output of "id" in a broken shell? -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to policykit-1 in Ubuntu. https://bugs.launchpad.net/bugs/1784964 Title: Regression due to CVE-2018-1116 (processes not inheriting

[Touch-packages] [Bug 1784964] Re: Regression due to CVE-2018-1116 (processes not inheriting user's groups )

2018-08-02 Thread TJ
I think this Debian-reported bug is closely related. The description certainly sounds very like what I've experienced so far. I'm not linking it to this bug report until any relationship is clearer. "policykit-1: please treat background processes (user bus) as part of active GUI session"

[Touch-packages] [Bug 1784964] Re: Regression due to CVE-2018-1116 (processes not inheriting user's groups )

2018-08-02 Thread Marc Deslauriers
/proc/*/loginuid is set by the pam_loginuid module when you login. Policykit isn't involved in that process at all. Are you using gdm to log into the graphical session? -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to

[Touch-packages] [Bug 1784964] Re: Regression due to CVE-2018-1116 (processes not inheriting user's groups )

2018-08-02 Thread TJ
** Summary changed: - Regression due to CVE-2018-1116 (processes not inheriting user ID or groups ) + Regression due to CVE-2018-1116 (processes not inheriting user's groups ) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to