[From nobody Sat May  2 15:07:07 2026
Received: (at submit) by bugs.debian.org; 24 Jan 2024 17:09:28 +0000
X-Spam-Checker-Version: SpamAssassin 3.4.6-bugs.debian.org_2005_01_02
 (2021-04-09) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-17.1 required=4.0 tests=BAYES_00,
 BODY_INCLUDES_PACKAGE,FOURLA,FROMDEVELOPER,HAS_PACKAGE,RDNS_NONE,
 SPF_HELO_NONE,SPF_NONE,T_SCC_BODY_TEXT_LINE,XMAILER_REPORTBUG
 autolearn=ham autolearn_force=no
 version=3.4.6-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 19; hammy, 150; neutral, 132; spammy,
 0. spammytokens: hammytokens:0.000-+--X-Debbugs-Cc,
 0.000-+--XDebbugsCc, 0.000-+--trixie, 0.000-+--H*M:reportbug,
 0.000-+--H*MI:reportbug
Return-path: <bigon@debian.org>
Received: from [2a02:a03f:65c5:3301:a396:af9d:8646:f1ea] (port=43500
 helo=edoras.bigon.be)
 by buxtehude.debian.org with esmtp (Exim 4.94.2)
 (envelope-from <bigon@debian.org>) id 1rSgki-0079qY-Bq
 for submit@bugs.debian.org; Wed, 24 Jan 2024 17:09:28 +0000
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Laurent Bigonville <bigon@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: pcscd: GDM user is NOT authorized for action: access_pcsc
Message-ID: <170611616491.147224.7683066149272989043.reportbug@edoras.bigon.be>
X-Mailer: reportbug 12.0.0
Date: Wed, 24 Jan 2024 18:09:24 +0100
Delivered-To: submit@bugs.debian.org

Package: pcscd
Version: 2.0.1-1
Severity: normal
X-Debbugs-Cc: debian-gtk-gnome@lists.debian.org

Hello,

When looking at the logs of pcscd, I see the following messages:

jan 22 09:47:37 edoras pcscd[1663]: 00000000 auth.c:125:IsClientAuthorized() Error in authorization: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Process not found
jan 22 09:47:37 edoras pcscd[1663]: 00000031 auth.c:143:IsClientAuthorized() Process 1565 (user: 115) is NOT authorized for action: access_pcsc

It seems that GDM is not allowed to talk to pcscd.

GDM has the functionality to detect whether there is a smartcard in the
reader and then use the gdm-smartcard PAM service instead of the
gdm-password one to perform login.

I guess that GDM should be whitelisted to allow it to use pcscd?

Kind regards,
Laurent Bigonville

-- System Information:
Debian Release: trixie/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1, 'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 6.6.11-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=fr_BE.UTF-8, LC_CTYPE=fr_BE.UTF-8 (charmap=UTF-8), LANGUAGE=fr_BE:fr
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: SELinux: enabled - Mode: Permissive - Policy name: refpolicy

Versions of packages pcscd depends on:
ii  init-system-helpers         1.66
ii  libc6                       2.37-13
ii  libccid [pcsc-ifd-handler]  1.5.5-1
ii  libglib2.0-0                2.78.3-1
ii  libpcsclite1                2.0.1-1
ii  libpolkit-gobject-1-0       124-1
ii  libsystemd0                 255.2-4
ii  libudev1                    255.2-4

pcscd recommends no packages.

Versions of packages pcscd suggests:
ii  systemd  255.2-4

-- no debconf information
]