-
-
Notifications
You must be signed in to change notification settings - Fork 7.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
gui window for ask user password not everywhere work (polkit not work on hardened Linux) #2756
Comments
@21pages need to test on xfce, or even gentoo xfce4. |
Input correct password and not pass or permission messagebox not pop up? What about typing rustdesk/src/platform/linux.rs Line 678 in e9e8620
|
OK, i am fixed my problem by turn on this in autorun settings: But i really think this is bad idea -- ask password for this. You ruin a great program by this:( |
@21pages can we check if this is turned on and ask users to turn it on? |
This is start "/usr/libexec/polkit-gnome-authentication-agent-1" in user session, maybe you can check it, this is turn on by default, this is i turn off because i don't need it... |
Why do you turn it off? |
i am paranoid 🙃 |
Perfect. |
check polkitd daemon process |
@21pages let me handle this |
|
$ ps ax | grep polkit polkitd -- start by root(systemd) |
@143981 Thanks, how about if you turn polkit off? |
Turned off and systemctl stop polkit, so everything is the same as in the first message started by itself if i "mv /usr/lib/polkit-1/polkitd /", then nothing happens when pressing the button in rustdesk |
polkitd process is still there when you turn off policykit auth |
if i "mv /usr/lib/polkit-1/polkitd /", then nothing happens when pressing the button in rustdesk |
Not find a good way to know if policykit auth turned on or off. |
I repeat - this is a bad idea initially, it's better to disable it completely in linux, leave it for windows ... |
Yesterday I've installed nightly (because I need "Always connect via relay" feature to work around disconnects/timeouts every 15 seconds) and have same issue.
I'm second one for leaving this "unlock security" feature to Windows users, configuration of usual user-space app shouldn't require I've tried to manually run
It turns out this error happens because of "hardened" system configuration: mounting /proc with While I'm not going to remove Resume. This "security" feature is actually incompatible with real "hardened" Linux systems. Please remove it! |
@21pages let's take note of this. |
PR is welcome |
;) root@thufir:~# systemctl status polkit
● polkit.service - Authorization Manager
Loaded: loaded (/lib/systemd/system/polkit.service; static)
Active: active (running) since Wed 2022-12-28 15:14:36 CET; 1 months 23 days ago I don't seem to have any root@thufir:~# ls /etc/polkit-1/
localauthority localauthority.conf.d And these results are consistent with what we've seen above: kwisatz@thufir:~$ pkexec echo "Hello, Polkit!"
==== AUTHENTICATING FOR org.freedesktop.policykit.exec ===
Authentication is needed to run `/usr/bin/echo' as the super user
Authenticating as: David Raison,,, (kwisatz)
Password:
polkit-agent-helper-1: error response to PolicyKit daemon: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: No session for cookie
==== AUTHENTICATION FAILED ===
Error executing command as another user: Not authorized
This incident has been reported. I'm guessing that in my case, the problem is not a hardened system, but a potentially incomplete I'll leave this here for others to read before posting the same thing unless you'd prefer me to delete both comments? EDIT: Turns out,
|
Got from chatgpt, @21pages try it out, including the same issue on mac.
and below is not greyed. |
@rustdesk Hello, I'm coming from here https://github.com/rustdesk-org/Octernships_Project and the README suggested this link as resource. My question is that Is this the task that we have to solve during the github Octernship ? |
Yes, but this is a simple task, you will have more challenging job to do. |
@rustdesk where can I find these tasks ? |
Octernships_Project is an exam for applying for GitHub Octernship. |
Hello @rustdesk !! |
@rustdesk the pr is supposed to be merged by the teacher right ? |
@rustdesk I have completed the assignment task and created the pull request. should I merge the changes into main branch (instructions regarding this is not clearly mentioned)? |
The private one. |
@rustdesk yes i have created a pull request in the private repo. So should I merge it (as it is showing option to merge the branch into main)? |
No |
I had the same problem with polkit. Describe the bug you encountered: What did you expect to happen instead? How did you install RustDesk? RustDesk version and environment Solved it by starting app this way: |
Can you try out below and tell me the result.
|
pkexec echo x; echo $?; This incident has been reported. |
Please run this in a Desktop env. gnome terminal or the other gui terminal. |
How about if your run |
open a new terminal, execute and input password here if failed, pkill rustdesk and start over again. |
I get "Connection refused" when trying to connect to my Debian 10.13 Linux PC (3.16.0-4-amd64 1 SMP Debian 3.16.51-3 (2017-12-13) x86_64 GNU/Linux) in xfce4. So I tried to stop the service and start it again at the Rustdesk GUI on said PC. The Stop-Button has no effect. I have the password prompt if I run rustdesk 1.2.3 from the terminal in my debian linux. But it does neither accept the root-password nor the user-password (sudo would be allowed) If I run polkitd in another terminal I get the following combination of errors (Let's assume my username is "user"): Rustdesk: polkitd: My system indeed is not running on en_US.UTF-8. It's on de_CH.UTF-8. I was able to connect to rustdesk once. But I guess that was before the reboot and another source of trouble may be that I am already connected using xrdp and the Windows Remotedesktopclient via another tunnel already. xfce4 seems to have a problem to share sessions with multiple remote-applications. I run policykit as root with /usr/lib/policykit-1/polkitd -r. The gnome-agent does not exist in my system and polkit-agent-helper-1 requires an argument but does not tell me which one. Since I get some reaction when running polkitd -r I guess that's not entirely wrong. But it may be worth a try to use the helper. But having to run rustdesk from the terminal in order to enter passwords there is not really the expected level of usability anyway. I have seen the discussion about the "unlock security" button not working. Did not find the link, though. But I get the same authentication-prompt when clicking this button. My workaround there was downgrading to 1.2.1 where this button works, do the settings and then re-upgrade to 1.2.3. But, well, now I have "connection refused". Also with 1.2.1, but I did the analysis with 1.2.3. |
#2756 (comment) works as a workaround. And stopping the service and starting it again solved my connection issues. Which are a different ticket anyway. |
Describe the bug you encountered:
I can't change settings
What did you expect to happen instead?
change settings
How did you install
RustDesk
?github night release rustdesk-1.2.0-0-x86_64.pkg.tar.zst
RustDesk version and environment
1.2.0-0
Gentoo, xfce4.
gui window for ask user password not everywhere work, and this is really bad idea, i don't want write my password for change settings, it's bad.
The text was updated successfully, but these errors were encountered: