Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 816393 - =sys-auth/polkit-0.120 /usr/lib/polkit-1/polkit-agent-helper-1 and /usr/bin/pkexec not installed as suid binary
Summary: =sys-auth/polkit-0.120 /usr/lib/polkit-1/polkit-agent-helper-1 and /usr/bin/p...
Status: CONFIRMED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Freedesktop bugs
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2021-10-05 09:19 UTC by Branko Grubic
Modified: 2022-03-29 01:12 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
emerge --info (emerge.info.txt,6.29 KB, text/plain)
2021-10-05 09:19 UTC, Branko Grubic
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Branko Grubic 2021-10-05 09:19:28 UTC
Hi,

I'm not sure is something wrong with my system or latest update of polkit changed a way binary is installed.

Gnome settings user management section complains that /usr/lib/polkit-1/polkit-agent-helper-1 is not suid binary and prevents "unlock" of options which are used to manage user accounts.

Downgrading to =sys-auth/polkit-0.119-r2 solves this issue.

Reproducible: Always




0.120:
precision ~ # ls -l /usr/lib/polkit-1/polkit-agent-helper-1                                    
-rwxr-xr-x 1 root root 18728  5. окт. у 11:11 /usr/lib/polkit-1/polkit-agent-helper-1   

0.119-r2:
precision ~ # ls -l /usr/lib/polkit-1/polkit-agent-helper-1                                     
-rws--x--x 1 root root 18744  5. окт. у 11:13 /usr/lib/polkit-1/polkit-agent-helper-1
Comment 1 Branko Grubic 2021-10-05 09:19:49 UTC
Created attachment 743097 [details]
emerge --info
Comment 2 Branko Grubic 2021-10-05 09:36:46 UTC
Uploaded only plain `emerge --info`, package related flags ...:
=================================================================
                        Package Settings
=================================================================

sys-auth/polkit-0.120::gentoo was built with the following:
USE="gtk introspection pam systemd -examples -kde (-selinux) -test" ABI_X86="(64)"
FEATURES="ebuild-locks userpriv parallel-fetch fixlafiles binpkg-multi-instance binpkg-logs sandbox sfperms preserve-libs config-protect-if-modified merge-sync unknown-features-warn usersync unmerge-logs ipc-sandbox multilib-strict assume-digests qa-unresolved-soname-deps distlocks network-sandbox protect-owned pid-sandbox usersandbox binpkg-dostrip strict xattr news userfetch unmerge-orphans binpkg-docompress"
Comment 3 Branko Grubic 2021-10-05 09:55:07 UTC
Adding notes that /usr/bin/pkexec is also not suid binary with 0.120.
Updating bug summary.
Comment 4 Lars Wendler (Polynomial-C) (RETIRED) gentoo-dev 2021-10-05 10:05:03 UTC
That might be a fallout switching from autotools to meson build system.
Comment 5 Larry the Git Cow gentoo-dev 2021-10-05 10:29:46 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f18282a12446f5f9bbba77a3b5cba4ab50778ef1

commit f18282a12446f5f9bbba77a3b5cba4ab50778ef1
Author:     Lars Wendler <polynomial-c@gentoo.org>
AuthorDate: 2021-10-05 10:28:28 +0000
Commit:     Lars Wendler <polynomial-c@gentoo.org>
CommitDate: 2021-10-05 10:29:39 +0000

    sys-auth/polkit: Revbump to install files with required SUID bit again
    
    Reported-by: Branko Grubic <bitlord0xff@gmail.com>
    Bug: https://bugs.gentoo.org/816393
    Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>

 sys-auth/polkit/{polkit-0.120.ebuild => polkit-0.120-r1.ebuild} | 6 ++++++
 1 file changed, 6 insertions(+)