Using the first login always works ok, after logout or 'systemctl restart gdm' (gnome-shell dies often) the login process hangs without starting gnome shell. I found this in the logs: [gnome-session] dconf-CRITICAL: unable to create file '/run/user /1000/dconf/user': Permission denied. dconf will not work properly Indeed the file already exists and it is owned by root. After I manually delete it (and another systemctl restart gdm) the login succeeds and the newly created file is owned by local user. Not sure whether to blame gnome-session or dconf. Reproducible: Always
$ emerge --info Portage 2.2.7 (default/linux/amd64/13.0, gcc-4.7.3, glibc-2.17, 3.12.6-gentoo x86_64) ================================================================= System uname: Linux-3.12.6-gentoo-x86_64-Intel-R-_Core-TM-_i5-2520M_CPU_@_2.50GHz-with-gentoo-2.2 KiB Mem: 3985128 total, 1323588 free KiB Swap: 4194300 total, 4173652 free Timestamp of tree: Sat, 04 Jan 2014 15:30:01 +0000 ld GNU ld (GNU Binutils) 2.23.2 app-shells/bash: 4.2_p45 dev-lang/python: 2.7.5-r3, 3.3.2-r2 dev-util/cmake: 2.8.11.2 dev-util/pkgconfig: 0.28 sys-apps/baselayout: 2.2 sys-apps/openrc: 0.12.4 sys-apps/sandbox: 2.6-r1 sys-devel/autoconf: 2.13, 2.69 sys-devel/automake: 1.11.6, 1.13.4 sys-devel/binutils: 2.23.2 sys-devel/gcc: 4.7.3-r1 sys-devel/gcc-config: 1.7.3 sys-devel/libtool: 2.4.2 sys-devel/make: 3.82-r4 sys-kernel/linux-headers: 3.12 (virtual/os-headers) sys-libs/glibc: 2.17 Repositories: gentoo local ACCEPT_KEYWORDS="amd64" ACCEPT_LICENSE="*" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-O2 -march=native -mtune=native -fomit-frame-pointer -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/share/gnupg/qualified.txt" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c" CXXFLAGS="-O2 -march=native -mtune=native -fomit-frame-pointer -pipe" DISTDIR="/usr/portage/distfiles" FCFLAGS="-O2 -pipe" FEATURES="assume-digests binpkg-logs config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch preserve-libs protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr" FFLAGS="-O2 -pipe" GENTOO_MIRRORS="http://distfiles.gentoo.org" LANG="en_US.utf8" LDFLAGS="-Wl,-O1 -Wl,--as-needed" MAKEOPTS="-j4" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage" USE="X X509 a52 aac acl aio alsa amd64 apng avx berkdb blksha1 bluetooth branding bzip2 cairo caps cdda cddb cdr chroot clang cli clutter colord colordiff cracklib crypt cryptsetup css ctype cups curl custom-optimization cxx dbus dga dri drm dts dv dvd dvdnav dvdr dvi dvipdfm eap-sim egl enca exif expat faac faad fbcon ffmpeg filter flac fontconfig fortran fpm fpx g3dvl gbm gd gdbm gdm gif gimp gles gles1 gles2 glib gmp gnome gnome-keyring gnome-online-accounts gnutls gpg gpm graphics graphite gstreamer gtk gtk3 gtkstyle gudev hardened hddtemp hdri hpn hwdb hybrid iconv icu id3tag idle imagemagick ipv6 irc ithreads jabber jingle jit jpeg jpeg2k json justify keymap kpathsea lcms ldns libkms libnotify libsecret llvm llvm-shared-libs lm_sensors logrotate lto mad mbox mikmod minizip mktemp mmap mmx mmxext mng modules mozilla mp3 mp4 mpeg mudflap multicall multilib multitarget musepack mysqli mysqlnd nat nautilus ncurses networkmanager nls nptl objc ogg openal opencl opengl openmp openrc optimization opus osmesa pam pcap pch pcmcia pcre pdf pkcs11 playtools png policykit publishers pulseaudio quicktime raw readline reencrypt rtc samba science secure-delete security session sha512 shared-dricore smartcard smp sockets speex spell sqlite srv sse sse2 sse3 sse4 sse4_1 ssl ssse3 strong-optimization svg syslog system-cairo system-ffmpeg system-icu system-jpeg system-libCg system-sqlite systemd sysvipc t1lib tci templates theora threads threadsafe thunar tiff timezone tokenizer tor-hardening tordns truetype udev unicode unlock-notify usb v4l vaapi valgrind vdpau vhosts vim-syntax vorbis wavpack wayland wayland-compositor webgl webkit2 webp wmf x264 xanim xattr xcb xcomposite xfs xhtml xml xmp xpm xv xvid xvmc xwayland zip zlib" ABI_X86="64" ALSA_CARDS="hda-intel" APACHE2_MODULES="alias auth_digest authn_anon authn_default authn_file authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock dbd dir env expires ext_filter file_cache filter headers ident imagemap include info log_config mem_cache mime mime_magic negotiation proxy rewrite setenvif so status unique_id userdir vhost_alias" APACHE2_MPMS="worker" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CURL_SSL="openssl" DRACUT_MODULES="plymouth systemd" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx" GRUB_PLATFORMS="pc efi-64 multiboot" INPUT_DEVICES="evdev synaptics" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer pdfimport" LINGUAS="en_GB en_US en" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-3" PYTHON_SINGLE_TARGET="python3_3" PYTHON_TARGETS="python3_3" QEMU_SOFTMMU_TARGETS="i386 x86_64 arm ppc" RUBY_TARGETS="ruby19" USERLAND="GNU" VIDEO_CARDS="nouveau intel i965" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" USE_PYTHON="3.3" Unset: CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, SYNC
I think this is caused by: https://bugs.freedesktop.org/show_bug.cgi?id=70810 That causes problems like: https://bugzilla.redhat.com/show_bug.cgi?id=1037285 Please show "emerge -Opv systemd pambase" output
In redhat report they point to some commits that could solve this: http://cgit.freedesktop.org/systemd/systemd/commit/?id=baae0358f349870544884e405e82e4be7d8add9f -> for systemd http://cgit.freedesktop.org/polkit/commit/?id=8635ffc16aeff6a07d675f861fe0dea03ea81d7e -> for polkit
(In reply to Pacho Ramos from comment #2) > I think this is caused by: > https://bugs.freedesktop.org/show_bug.cgi?id=70810 > > That causes problems like: > https://bugzilla.redhat.com/show_bug.cgi?id=1037285 looks like it is. Although I'm not sure what causes the ownership change. after switching to root the file is still owned by local user. > > Please show "emerge -Opv systemd pambase" output $ emerge -Opv systemd pambase These are the packages that would be merged, in order: [ebuild R ] sys-apps/systemd-208-r2:0/1 USE="acl cryptsetup filecaps gudev kmod pam policykit xattr -audit -doc -firmware-loader -gcrypt -http -introspection -lzma -python -qrcode (-selinux) -tcpd {-test} -vanilla" ABI_X86="32 (64) (-x32)" PYTHON_SINGLE_TARGET="-python2_7" PYTHON_TARGETS="-python2_7" 0 kB [ebuild R ] sys-auth/pambase-20120417-r3 USE="cracklib gnome-keyring mktemp sha512 systemd -consolekit -debug -minimal -pam_krb5 -pam_ssh -passwdqc (-selinux)" 0 kB Total: 2 packages (2 reinstalls), Size of downloads: 0 kB
Would be nice if you could test both patches (after merging the new packages, I would also reboot to ensure all permissions are reset to proper values)
(In reply to Pacho Ramos from comment #5) > Would be nice if you could test both patches (after merging the new > packages, I would also reboot to ensure all permissions are reset to proper > values) the systemd patch does not apply on 208 and IMO can not be backported (too many changes like "logind: port logind to libsystemd-bus"). I'm willing to test a backported patch, but IMO it's just easier to wait for 209 the polkit patch only affects paths that use pkexec. so using it did not help. systemctl restart gdm with a user logged in still fails. It occasionally created unkillable Xorg instances, but I think that's unrelated to this issue.
I'm not sure if I have similar problem. I can relogin, but if I do that, then I'm not authorized to do any privileged tasks like poweroff, reboot, etc and need to enter root password.
No problems with file permissions: $ LANG=C find /run/user/1000/ -exec ls -ldn {} + drwx------ 9 1000 1000 200 Jan 18 15:08 /run/user/1000/ lrwxrwxrwx 1 0 0 17 Jan 18 15:02 /run/user/1000/X11-display -> /tmp/.X11-unix/X0 drwx------ 2 1000 1000 60 Jan 18 15:46 /run/user/1000/dconf -rw------- 1 1000 1000 2 Jan 18 15:47 /run/user/1000/dconf/user drwx------ 3 1000 1000 60 Jan 18 14:59 /run/user/1000/gnome-shell drwx------ 2 1000 1000 40 Jan 18 14:59 /run/user/1000/gnome-shell/runtime-state-LE.:0 dr-x------ 2 1000 1000 0 Jan 18 15:08 /run/user/1000/gvfs drwx------ 2 1000 1000 40 Jan 18 14:59 /run/user/1000/gvfs-burn drwx------ 2 1000 1000 120 Jan 18 15:08 /run/user/1000/keyring-AZd7QJ srwxr-xr-x 1 1000 1000 0 Jan 18 15:08 /run/user/1000/keyring-AZd7QJ/control srwxr-xr-x 1 1000 1000 0 Jan 18 15:08 /run/user/1000/keyring-AZd7QJ/gpg srwxr-xr-x 1 1000 1000 0 Jan 18 15:08 /run/user/1000/keyring-AZd7QJ/pkcs11 srwxr-xr-x 1 1000 1000 0 Jan 18 15:08 /run/user/1000/keyring-AZd7QJ/ssh drwx------ 2 1000 1000 100 Jan 18 15:08 /run/user/1000/pulse srwxrwxrwx 1 1000 1000 0 Jan 18 15:02 /run/user/1000/pulse/dbus-socket srwxrwxrwx 1 1000 1000 0 Jan 18 15:02 /run/user/1000/pulse/native -rw------- 1 1000 1000 6 Jan 18 15:02 /run/user/1000/pulse/pid drwxr-xr-x 2 1000 1000 60 Jan 18 14:15 /run/user/1000/systemd srwxrwxrwx 1 1000 1000 0 Jan 18 14:15 /run/user/1000/systemd/private
*** Bug 501064 has been marked as a duplicate of this bug. ***
I have now three systems, where I can't login anymore from gdm into GNOME due to ownership of /run/user/1203/dconf/user or /run/user/1203/X11-display, as described in Bug 501064. One week ago it sometimes helped to remove these files and try to login once more. Now I don't have any chance to login into GNOME. XFCE is not any problem. Any hint would be really appreciated.
*** Bug 491792 has been marked as a duplicate of this bug. ***
We have a fixed systemd stabilized for some time
