Project

General

Profile

Bug #8256

Running pkexec in Jessie doesn't open the GNOME prompt

Added by anonym almost 5 years ago. Updated almost 5 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
-
Target version:
Start date:
11/13/2014
Due date:
% Done:

100%

Feature Branch:
Type of work:
Code
Blueprint:
Starter:
Affected tool:

Description

Note that this only affects Tails based on Debian Jessie (feature/jessie)!

When running pkexec (like in the features/root_access_control.feature test) we do not get the GNOME password prompt, only a terminal prompt asking for the password. We install policykit-1-gnome, but polkit-gnome-autenticationagent-1 isn't running in our session, which explains this. Manually starting it with sudo polkit-gnome-autenticationagent-1 brings the GNOME prompt back for pkexec.

So why doesn't it autostart any more? It should be autostarted via XDG ( /etc/xdg/autostart/polkit-gnome-authentication-agent-1.desktop), which has the following criteria, which may be related: AutostartCondition: GNOME3 unless-session gnome


Related issues

Blocks Tails - Feature #7563: Update the automated test suite for Jessie ISO images Resolved 11/26/2014 01/15/2016

Associated revisions

Revision 3f0a483c (diff)
Added by Tails developers almost 5 years ago

Revert "Make /proc/<pid>/ invisible and restricted for other users." (Closes: #8256).

This reverts commit c77ddc0a81a37721f36b44741f21908994571b08.

hidepid != 0 in its current simplistic form can't be supported by systemd:

https://bugzilla.redhat.com/show_bug.cgi?id=1130796#c2
http://lists.freedesktop.org/archives/systemd-devel/2012-October/006860.html

History

#1 Updated by anonym almost 5 years ago

  • Blocks Feature #7563: Update the automated test suite for Jessie ISO images added

#2 Updated by intrigeri almost 5 years ago

anonym wrote:

Manually starting it with sudo polkit-gnome-autenticationagent-1 brings the GNOME prompt back for pkexec.

The polkit prompt is supposed to be handled by GNOME Shell (which provides better security). At least it's the case on my sid system, and I have no polkit authentication agent running.

So why doesn't it autostart any more? It should be autostarted via XDG ( /etc/xdg/autostart/polkit-gnome-authentication-agent-1.desktop), which has the following criteria, which may be related: AutostartCondition: GNOME3 unless-session gnome

Indeed, that's why it is not started in GNOME Shell, which is right. So the question is rather: why isn't GNOME Shell taking care of this?

We are installing a very stripped down version of GNOME, which probably explains things. I would apt install gnome-core, logout/login, and see if it fixes things, and then:

  • if it does fix things, try to find out which newly installed package was missing;
  • if it doesn't fix things, retry with recommends enabled; if still not fixed, try harder and install task-gnome-desktops with recommends enabled.

#3 Updated by intrigeri almost 5 years ago

  • Assignee set to intrigeri

Giving it a try.

#4 Updated by intrigeri almost 5 years ago

Installing gnome-core and task-gnome-desktop, both with recommends enabled, doesn't solve the problem. But this did not install recommends for packages that were installed already, I think.

#5 Updated by intrigeri almost 5 years ago

  • Status changed from Confirmed to Resolved
  • % Done changed from 0 to 100

This was hidepid's fault, disabled in commit 3ca79755.

Also available in: Atom PDF