Public bug reported:
The gnome-remote-desktop system daemon (Remote Login, port 3389) and
configuration daemon are designed to store credentials securely in the
TPM 2.0 chip using PCR-bound sealing. However, the gnome-remote-desktop
user that both daemons run as is not in the tss group, so /dev/tpmrm0
(660 tss:tss) is inaccessible.
This causes a silent tcti:IO failure at startup:
Init TPM credentials failed because Failed to initialize transmission
interface context: tcti:IO failure, using GKeyFile as fallback
The TPM path is dead code on every Ubuntu installation since all users
fall through to file-based credential storage.
** Affects: gnome-remote-desktop (Ubuntu)
Importance: High
Assignee: Charles (charles05)
Status: Triaged
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2161032
Title:
gnome-remote-desktop cannot access TPM for credential storage; tcti:IO
failure forces file fallback
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-remote-desktop/+bug/2161032/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
