Bug 774468

Summary:	app-crypt/pinentry could not open .Xauthority when gpg-agent is started by pam
Product:	Gentoo Linux	Reporter:	Klaus Ethgen <Klaus+gentoo>
Component:	Current packages	Assignee:	Mikle Kolyada (RETIRED) <zlogene>
Status:	RESOLVED INVALID
Severity:	major	CC:	jstein
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Klaus Ethgen 2021-03-06 15:31:16 UTC

I use pam_gnupg to start gpg-agent. (Generally, that works well on Devuan system) But when the agent need to query for passphrase, it fails as pinentry fails to read .Xauthority.

I use pinentry-qt but I also had it with other pinentry.

The strange thing is, when I kill the agent and start it manually (or in xinit), it works well and pinentry has no troubles.

I already try with disabled caps-use-flag but without any success.

I checked the gpg-agent and environment, user, rights and caps are fully correct. I cannot find differences to when I start it manually.

My system does not use elogind. The file itself is reachable and accessable by my own user.

Reproducible: Always

Steps to Reproduce:
1. Start gpg-agent via pam (Not manually!)
2. Try to use a key that is in agent
Actual Results:  
It fails and when straced, you can see that pinentry cannot access the .Xauthority file.

Expected Results:  
It shows a pinentry window

Comment 1 Mikle Kolyada (RETIRED) archtester

2021-03-08 12:23:41 UTC

Gentoo does not support pam_gnupg, therefore all possible failures are on you.