** Description changed: On current Resolute, when logging in via authd, polkit prompts always fail to authenticate after entering the password. The system log messages point to an issue with AppArmor. Steps to reproduce: 1. Install and configure authd 2. Log in with authd 3. Run `pkexec ls` + System information: + $ uname -a + Linux ubuntu26-04 7.0.0-10-generic #10-Ubuntu SMP PREEMPT_DYNAMIC Thu Mar 19 10:24:42 UTC 2026 x86_64 GNU/Linux + $ dpkg -l apparmor + ii apparmor 5.0.0~beta1-0ubuntu3 amd64 user-space parser utility for AppArmor + Logs: - Mar 23 17:30:03 ubuntu gnome-shell[29687]: polkitAuthenticationAgent: Received 2 identities that can be used for authentication. Only considering one. Mar 23 17:30:03 ubuntu kernel: kauditd_printk_skb: 7 callbacks suppressed Mar 23 17:30:03 ubuntu kernel: audit: type=1334 audit(1774283403.671:847): prog-id=292 op=LOAD Mar 23 17:30:03 ubuntu systemd[1]: Starting polkit-agent-helper@31-8196-29687_45754-10000.service - Authorization Manager Agent Helper (PID 29687/UID 10000)... Mar 23 17:30:09 ubuntu kernel: audit: type=1400 audit(1774283409.067:848): apparmor="DENIED" operation="connect" class="file" info="Failed name lookup - disconnected path" error=-13 profile="unix-chkpwd" name="run/systemd/userdb/org.gnome.DisplayManager" pid=33377 comm="unix_chkpwd" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0 Mar 23 17:30:09 ubuntu kernel: audit: type=1300 audit(1774283409.067:848): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffd4c58d7e0 a2=2f a3=0 items=0 ppid=33360 pid=33377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="unix_chkpwd" exe="/usr/sbin/unix_chkpwd" subj=unix-chkpwd key=(null) Mar 23 17:30:09 ubuntu kernel: audit: type=1327 audit(1774283409.067:848): proctitle=2F7573722F7362696E2F756E69785F63686B707764007465737440756275646576312E6F6E6D6963726F736F66742E636F6D0063686B657870697279 Mar 23 17:30:09 ubuntu kernel: audit: type=1400 audit(1774283409.067:849): apparmor="DENIED" operation="connect" class="file" info="Failed name lookup - disconnected path" error=-13 profile="unix-chkpwd" name="run/systemd/userdb/io.systemd.DynamicUser" pid=33377 comm="unix_chkpwd" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0 Mar 23 17:30:09 ubuntu kernel: audit: type=1300 audit(1774283409.067:849): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7ffd4c58d7e0 a2=2d a3=0 items=0 ppid=33360 pid=33377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="unix_chkpwd" exe="/usr/sbin/unix_chkpwd" subj=unix-chkpwd key=(null) Mar 23 17:30:09 ubuntu kernel: audit: type=1327 audit(1774283409.067:849): proctitle=2F7573722F7362696E2F756E69785F63686B707764007465737440756275646576312E6F6E6D6963726F736F66742E636F6D0063686B657870697279 Mar 23 17:30:09 ubuntu kernel: audit: type=1400 audit(1774283409.068:850): apparmor="DENIED" operation="sendmsg" class="file" info="Failed name lookup - disconnected path" error=-13 profile="unix-chkpwd" name="run/systemd/journal/dev-log" pid=33377 comm="unix_chkpwd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 Mar 23 17:30:09 ubuntu kernel: audit: type=1300 audit(1774283409.068:850): arch=c000003e syscall=42 success=no exit=-13 a0=3 a1=7ffd4c58cc40 a2=b a3=0 items=0 ppid=33360 pid=33377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="unix_chkpwd" exe="/usr/sbin/unix_chkpwd" subj=unix-chkpwd key=(null) Mar 23 17:30:09 ubuntu kernel: audit: type=1327 audit(1774283409.068:850): proctitle=2F7573722F7362696E2F756E69785F63686B707764007465737440756275646576312E6F6E6D6963726F736F66742E636F6D0063686B657870697279 Mar 23 17:30:09 ubuntu kernel: audit: type=1400 audit(1774283409.068:851): apparmor="DENIED" operation="connect" class="file" info="Failed name lookup - disconnected path" error=-13 profile="unix-chkpwd" name="run/authd.sock" pid=33377 comm="unix_chkpwd" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0 Mar 23 17:30:09 ubuntu gnome-shell[29687]: Unknown line 'polkit-agent-helper-1: pam_acct_mgmt failed: Authentication failure' from helper Mar 23 17:30:09 ubuntu systemd[1]: Starting polkit-agent-helper@32-8197-29687_45754-10000.service - Authorization Manager Agent Helper (PID 29687/UID 10000)... Mar 23 17:30:09 ubuntu systemd[1]: polkit-agent-helper@31-8196-29687_45754-10000.service: Main process exited, code=exited, status=1/FAILURE Mar 23 17:30:09 ubuntu systemd[1]: polkit-agent-helper@31-8196-29687_45754-10000.service: Failed with result 'exit-code'. Mar 23 17:30:09 ubuntu systemd[1]: Failed to start polkit-agent-helper@31-8196-29687_45754-10000.service - Authorization Manager Agent Helper (PID 29687/UID 10000).
-- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2145628 Title: Using pkexec as an authd user fails To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2145628/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
