Bug#1143635: [Pkg-utopia-maintainers] Bug#1143635: polkitd: Forky - root auth for progs like gparted synaptic etc. only works once after a reboot

2026-08-05 Thread Michael Biebl

Am 05.08.26 um 13:10 schrieb Michael Biebl:

What I do notice is, that mate-polkit pulls in the accountsservice 
package, which is not a dependency of cinnamon.
Could you try the following: uninstall mate-polkit(-common) again, but 
keep accountsservice installed.

Does that fix the issue?
If so, cinnamon probably has an undeclared dependency on accountsservice 
and it should either add a dependency on it or handle its absence.


I pulled the sources for src:cinnamon and noticed the following:


$ grep AccountsService -R
src/main.c:  g_log_set_handler ("AccountsService", G_LOG_LEVEL_DEBUG,
js/ui/polkitAuthenticationAgent.js:const AccountsService = 
imports.gi.AccountsService;
js/ui/polkitAuthenticationAgent.js:this._accountsService = 
AccountsService.UserManager.get_default();
files/usr/share/cinnamon/cinnamon-settings/modules/cs_user.py:gi.require_version('AccountsService',
 '1.0')
files/usr/share/cinnamon/cinnamon-settings/modules/cs_user.py:from 
gi.repository import AccountsService, GLib, GdkPixbuf, XApp
files/usr/share/cinnamon/cinnamon-settings/modules/cs_user.py:
self.accountService = 
AccountsService.UserManager.get_default().get_user(current_user)
files/usr/share/cinnamon/cinnamon-settings-users/cinnamon-settings-users.py:gi.require_version("AccountsService",
 "1.0")
files/usr/share/cinnamon/cinnamon-settings-users/cinnamon-settings-users.py:from
 gi.repository import Gtk, GObject, Gio, GdkPixbuf, AccountsService, GLib
files/usr/share/cinnamon/cinnamon-settings-users/cinnamon-settings-users.py:
users = AccountsService.UserManager.get_default().list_users()
files/usr/share/cinnamon/cinnamon-settings-users/cinnamon-settings-users.py:
self.accountService = AccountsService.UserManager.get_default()
files/usr/share/cinnamon/cinnamon-settings-users/cinnamon-settings-users.py:
user.set_account_type(AccountsService.UserAccountType.ADMINISTRATOR)
files/usr/share/cinnamon/cinnamon-settings-users/cinnamon-settings-users.py:
user.set_account_type(AccountsService.UserAccountType.STANDARD)
files/usr/share/cinnamon/cinnamon-settings-users/cinnamon-settings-users.py:
if user.get_password_mode() == AccountsService.UserPasswordMode.REGULAR:
files/usr/share/cinnamon/cinnamon-settings-users/cinnamon-settings-users.py:
elif user.get_password_mode() == AccountsService.UserPasswordMode.NONE:
files/usr/share/cinnamon/cinnamon-settings-users/cinnamon-settings-users.py:
if user.get_account_type() == 
AccountsService.UserAccountType.ADMINISTRATOR:
files/usr/share/cinnamon/cinnamon-settings-users/cinnamon-settings-users.py:
account_type = AccountsService.UserAccountType.ADMINISTRATOR
files/usr/share/cinnamon/cinnamon-settings-users/cinnamon-settings-users.py:
account_type = AccountsService.UserAccountType.STANDARD
files/usr/share/cinnamon/cinnamon-settings-users/cinnamon-settings-users.py:
new_user.set_password_mode(AccountsService.UserPasswordMode.NONE)
files/usr/share/cinnamon/applets/[email protected]/applet.js:const 
AccountsService = imports.gi.AccountsService;
files/usr/share/cinnamon/applets/[email protected]/applet.js:this._user 
= AccountsService.UserManager.get_default().get_user(GLib.get_user_name());
files/usr/share/cinnamon/applets/[email protected]/applet.js:const 
AccountsService = imports.gi.AccountsService;
files/usr/share/cinnamon/applets/[email protected]/applet.js:let user = 
AccountsService.UserManager.get_default().get_user(GLib.get_user_name(



js/ui/polkitAuthenticationAgent.js:this._accountsService = 
AccountsService.UserManager.get_default();


This quick check confirms that the cinnamon authentication agent 
interacts with the AccountService daemon and it probably doesn't handle 
the case properly when it's not installed/running.


Regards,
Michael


OpenPGP_signature.asc
Description: OpenPGP digital signature


Bug#1143635: [Pkg-utopia-maintainers] Bug#1143635: polkitd: Forky - root auth for progs like gparted synaptic etc. only works once after a reboot

2026-08-05 Thread Michael Biebl

Control: reassign -1 cinnamon


Hi Rolf

Am 05.08.26 um 10:53 schrieb Rolf Heinrichs:

Package: polkitd
Version: 127-3
Severity: important
X-Debbugs-Cc: [email protected]

Dear Maintainer,

* What led up to the situation?
Installation of forky from daily build 05.08.26, German localisation/keyboard, 
X11/Lightdm/Cinnamon DE in VBox

The root auth works once after reboot, the second call brings no popup auth 
window, ends in processes running in the background:

From ps -ax trying to start synaptic:

2638 ?S  0:00 /bin/sh /usr/bin/synaptic-pkexec
2641 ?Sl 0:00 pkexec /usr/sbin/synaptic

Installed polkit related packages:
apt list -i *polkit*
gir1.2-polkit-1.0/testing,now 127-3 amd64  [Installiert,automatisch]
libpolkit-agent-1-0/testing,now 127-3 amd64  [Installiert,automatisch]
libpolkit-gobject-1-0/testing,now 127-3 amd64  [Installiert,automatisch]
polkitd/testing,now 127-3 amd64  [Installiert,automatisch]

Thank you for looking at the issue.

Rolf



Your desktop environment is supposed to provide a so called 
authentication agent. It prompts the user for authentication information.
Some desktop environments, like GNOME and Cinnamon, have that 
functionality built into their desktop shell directly, some desktop 
environments, like MATE use a dedicated binary for that.


Since you are running cinnamon, which has a builtin authentication 
agent, I'm going to re-assign this bug report to this package.

Apparently it gets confused after the first authentication prompt.
Installing mate-polkit should not be necessary.

What I do notice is, that mate-polkit pulls in the accountsservice 
package, which is not a dependency of cinnamon.
Could you try the following: uninstall mate-polkit(-common) again, but 
keep accountsservice installed.

Does that fix the issue?
If so, cinnamon probably has an undeclared dependency on accountsservice 
and it should either add a dependency on it or handle its absence.


Regards,
Michael




OpenPGP_signature.asc
Description: OpenPGP digital signature