Public bug reported:
On current Resolute, when logging in via authd, polkit prompts always
fail to authenticate after entering the password. The system log
messages point to an issue with AppArmor.
Steps to reproduce:
1. Install and configure authd
2. Log in with authd
3. Run `pkexec ls`
Logs:
Mar 23 17:30:03 ubuntu gnome-shell[29687]: polkitAuthenticationAgent: Received
2 identities that can be used for authentication. Only considering one.
Mar 23 17:30:03 ubuntu kernel: kauditd_printk_skb: 7 callbacks suppressed
Mar 23 17:30:03 ubuntu kernel: audit: type=1334 audit(1774283403.671:847):
prog-id=292 op=LOAD
Mar 23 17:30:03 ubuntu systemd[1]: Starting
polkit-agent-helper@31-8196-29687_45754-10000.service - Authorization Manager
Agent Helper (PID 29687/UID 10000)...
Mar 23 17:30:09 ubuntu kernel: audit: type=1400 audit(1774283409.067:848):
apparmor="DENIED" operation="connect" class="file" info="Failed name lookup -
disconnected path" error=-13 profile="unix-chkpwd"
name="run/systemd/userdb/org.gnome.DisplayManager" pid=33377 comm="unix_chkpwd"
requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
Mar 23 17:30:09 ubuntu kernel: audit: type=1300 audit(1774283409.067:848):
arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffd4c58d7e0 a2=2f a3=0
items=0 ppid=33360 pid=33377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0
egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="unix_chkpwd"
exe="/usr/sbin/unix_chkpwd" subj=unix-chkpwd key=(null)
Mar 23 17:30:09 ubuntu kernel: audit: type=1327 audit(1774283409.067:848):
proctitle=2F7573722F7362696E2F756E69785F63686B707764007465737440756275646576312E6F6E6D6963726F736F66742E636F6D0063686B657870697279
Mar 23 17:30:09 ubuntu kernel: audit: type=1400 audit(1774283409.067:849):
apparmor="DENIED" operation="connect" class="file" info="Failed name lookup -
disconnected path" error=-13 profile="unix-chkpwd"
name="run/systemd/userdb/io.systemd.DynamicUser" pid=33377 comm="unix_chkpwd"
requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
Mar 23 17:30:09 ubuntu kernel: audit: type=1300 audit(1774283409.067:849):
arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffd4c58d7e0 a2=2d a3=0
items=0 ppid=33360 pid=33377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0
egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="unix_chkpwd"
exe="/usr/sbin/unix_chkpwd" subj=unix-chkpwd key=(null)
Mar 23 17:30:09 ubuntu kernel: audit: type=1327 audit(1774283409.067:849):
proctitle=2F7573722F7362696E2F756E69785F63686B707764007465737440756275646576312E6F6E6D6963726F736F66742E636F6D0063686B657870697279
Mar 23 17:30:09 ubuntu kernel: audit: type=1400 audit(1774283409.068:850):
apparmor="DENIED" operation="sendmsg" class="file" info="Failed name lookup -
disconnected path" error=-13 profile="unix-chkpwd"
name="run/systemd/journal/dev-log" pid=33377 comm="unix_chkpwd"
requested_mask="w" denied_mask="w" fsuid=0 ouid=0
Mar 23 17:30:09 ubuntu kernel: audit: type=1300 audit(1774283409.068:850):
arch=c000003e syscall=42 success=no exit=-13 a0=3 a1=7ffd4c58cc40 a2=b a3=0
items=0 ppid=33360 pid=33377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0
egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="unix_chkpwd"
exe="/usr/sbin/unix_chkpwd" subj=unix-chkpwd key=(null)
Mar 23 17:30:09 ubuntu kernel: audit: type=1327 audit(1774283409.068:850):
proctitle=2F7573722F7362696E2F756E69785F63686B707764007465737440756275646576312E6F6E6D6963726F736F66742E636F6D0063686B657870697279
Mar 23 17:30:09 ubuntu kernel: audit: type=1400 audit(1774283409.068:851):
apparmor="DENIED" operation="connect" class="file" info="Failed name lookup -
disconnected path" error=-13 profile="unix-chkpwd" name="run/authd.sock"
pid=33377 comm="unix_chkpwd" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
Mar 23 17:30:09 ubuntu gnome-shell[29687]: Unknown line 'polkit-agent-helper-1:
pam_acct_mgmt failed: Authentication failure' from helper
Mar 23 17:30:09 ubuntu systemd[1]: Starting
polkit-agent-helper@32-8197-29687_45754-10000.service - Authorization Manager
Agent Helper (PID 29687/UID 10000)...
Mar 23 17:30:09 ubuntu systemd[1]:
polkit-agent-helper@31-8196-29687_45754-10000.service: Main process exited,
code=exited, status=1/FAILURE
Mar 23 17:30:09 ubuntu systemd[1]:
polkit-agent-helper@31-8196-29687_45754-10000.service: Failed with result
'exit-code'.
Mar 23 17:30:09 ubuntu systemd[1]: Failed to start
polkit-agent-helper@31-8196-29687_45754-10000.service - Authorization Manager
Agent Helper (PID 29687/UID 10000).
** Affects: apparmor (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2145628
Title:
Using pkexec as an authd user fails
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2145628/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
