Public bug reported:
With 12.10 it looks like gnome-disk-utility has moved to using udisks2
behind the scenes. However, it appears that polkit entries were not
created for most of the potential actions that can be taken within
gnome-disks. Many of the actions result in an error like the following:
An error occured
Not authorized to perform operation (udisks-error-quark, 4)
I've received the above error when trying to use gnome-disks start a
benchmark of a volume. This worked fine under 12.04 (via the gnome-disks
precursor palimpsest and udisks).
Digging into this, it appears that there are a total of 38 possible
polkit actions and local admins are only authorized by default for a
total of three of them (via 10-vendor.d/com.ubuntu.desktop.pkla):
org.freedesktop.udisks2.filesystem-mount-system
org.freedesktop.udisks2.encrypted-unlock-system
org.freedesktop.udisks2.filesystem-fstab
Contrast this with the authorization for the previous udisk activities:
org.freedesktop.udisks.filesystem-*
org.freedesktop.udisks.drive-ata-smart*
Which covers 10 actions from what I can see.
For parity with previous releases I believe the following actions also need to
be authorized for local admins:
org.freedesktop.udisks2.filesystem-mount [1]
org.freedesktop.udisks2.filesystem-unmount-others [1]
org.freedesktop.udisks2.ata-smart-* [2]
I'm sure there are others as there doesn't appear to be a direct 1:1
translation for some of the permissions.
This is a regression with regard to the previous 12.04 release and what
local admin users were authorized to do.
[1] - covered previously by org.freedesktop.udisks.filesystem-*
[2]- covered previously by org.freedesktop.udisks.drive-ata-smart*
ProblemType: Bug
DistroRelease: Ubuntu 12.10
Package: gnome-disk-utility 3.6.1-0ubuntu1
ProcVersionSignature: Ubuntu 3.5.0-17.28-generic 3.5.5
Uname: Linux 3.5.0-17-generic x86_64
ApportVersion: 2.6.1-0ubuntu3
Architecture: amd64
Date: Sat Oct 20 14:45:17 2012
InstallationMedia: Ubuntu 9.10 "Karmic Koala" - Release amd64 (20091027)
ProcEnviron:
TERM=xterm
PATH=(custom, no user)
XDG_RUNTIME_DIR=<set>
LANG=en_US.UTF-8
SHELL=/bin/bash
SourcePackage: gnome-disk-utility
UpgradeStatus: Upgraded to quantal on 2012-10-12 (8 days ago)
** Affects: gnome-disk-utility (Ubuntu)
Importance: Undecided
Status: New
** Tags: amd64 apport-bug quantal regression-release
** Description changed:
With 12.10 it looks like gnome-disk-utility has moved to using udisks2
behind the scenes. However, it appears that polkit entries were not
created for most of the potential actions that can be taken within
gnome-disks. Many of the actions result in an error like the following:
An error occured
Not authorized to perform operation (udisks-error-quark, 4)
- I've received the above error when trying to use gnome-disks to do things
such as:
- - starting a benchmark of a volume
-
- All of these actions worked fine under 12.04 (via the gnome-disks
+ I've received the above error when trying to use gnome-disks start a
+ benchmark of a volume. This worked fine under 12.04 (via the gnome-disks
precursor palimpsest and udisks).
Digging into this, it appears that there are a total of 38 possible
polkit actions and local admins are only authorized by default for a
total of three of them (via 10-vendor.d/com.ubuntu.desktop.pkla):
org.freedesktop.udisks2.filesystem-mount-system
org.freedesktop.udisks2.encrypted-unlock-system
org.freedesktop.udisks2.filesystem-fstab
Contrast this with the authorization for the previous udisk activities:
org.freedesktop.udisks.filesystem-*
org.freedesktop.udisks.drive-ata-smart*
Which covers 10 actions from what I can see.
For parity with previous releases I believe the following actions also need
to be authorized for local admins:
org.freedesktop.udisks2.filesystem-mount [1]
org.freedesktop.udisks2.filesystem-unmount-others [1]
org.freedesktop.udisks2.ata-smart-* [2]
I'm sure there are others as there doesn't appear to be a direct 1:1
translation for some of the permissions.
This is a regression with regard to the previous 12.04 release and what
local admin users were authorized to do.
[1] - covered previously by org.freedesktop.udisks.filesystem-*
[2]- covered previously by org.freedesktop.udisks.drive-ata-smart*
ProblemType: Bug
DistroRelease: Ubuntu 12.10
Package: gnome-disk-utility 3.6.1-0ubuntu1
ProcVersionSignature: Ubuntu 3.5.0-17.28-generic 3.5.5
Uname: Linux 3.5.0-17-generic x86_64
ApportVersion: 2.6.1-0ubuntu3
Architecture: amd64
Date: Sat Oct 20 14:45:17 2012
InstallationMedia: Ubuntu 9.10 "Karmic Koala" - Release amd64 (20091027)
ProcEnviron:
- TERM=xterm
- PATH=(custom, no user)
- XDG_RUNTIME_DIR=<set>
- LANG=en_US.UTF-8
- SHELL=/bin/bash
+ TERM=xterm
+ PATH=(custom, no user)
+ XDG_RUNTIME_DIR=<set>
+ LANG=en_US.UTF-8
+ SHELL=/bin/bash
SourcePackage: gnome-disk-utility
UpgradeStatus: Upgraded to quantal on 2012-10-12 (8 days ago)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1069234
Title:
regression: local admin not authorized for many tasks
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-disk-utility/+bug/1069234/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
