<div dir="ltr">Package: policykit-1<br>Version: 0.105-25<br>Severity: important<br><br><br><br>-- System Information:<br>Debian Release: 10.7<br> APT prefers stable-updates<br> APT policy: (500, 'stable-updates'), (500, 'stable')<br>Architecture: amd64 (x86_64)<br><br>Kernel: Linux 4.19.0-8-amd64 (SMP w/8 CPU cores)<br>Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1), LANGUAGE= (charmap=ISO-8859-1)<br>Shell: /bin/sh linked to /usr/bin/dash<br>Init: systemd (via /run/systemd/system)<br>LSM: AppArmor: enabled<br><br>Versions of packages policykit-1 depends on:<br>ii dbus 1.12.20-0+deb10u1<br>ii libc6 2.28-10<br>ii libglib2.0-0 2.58.3-2+deb10u2<br>ii libpam-systemd 241-7~deb10u5<br>ii libpam0g 1.3.1-5<br>ii libpolkit-agent-1-0 0.105-25<br>ii libpolkit-backend-1-0 0.105-25<br>ii libpolkit-gobject-1-0 0.105-25<br><br>policykit-1 recommends no packages.<br><br>policykit-1 suggests no packages.<br><br>-- no debconf information<br><br>Dear Maintainer,<br><br>When trying to mount usbkey on plasma-destop i have an error : You are not authorized to mount this device.<br><br>With some research it seems that polkitd block this, i see it with auditd when i tried to mount the usbbkey:<br><br>audispd[636]: node=mystation type=SYSCALL msg=audit(1607504338.301:1820):
arch=c000003e syscall=42 success=yes exit=0 a0=a a1=7ffe9f0f1740 a2=10
a3=5 items=0 ppid=1 pid=770 auid=4294967295 uid=0 gid=0 euid=0 suid=0
fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="polkitd"
exe="/usr/lib/policykit-1/polkitd" subj==unconfined key="T0"<br><br>I understand that polkit set the rules for actions on the desktop session and it seems there are 3 states possible : <br><br>-active : user sesion (local) interative<br>-inacive : user session (local) non-interactive<br>-any : other case<br><br>Unfortunately
I use NIS map for my account and I think this is not considered as an
local session, (usbkey and sound not work either)<br><br>The session is define by systemd-logind but i not found how include the nis session or how to add a polkit rule for nis session.<br><br>The
bypass that i found is to add the NIS map passwd of my account in
/etc/passwd of the station and then it works, i can mount usbkey and
have sound on video.<br><br>Is that possible to include rules to include NIS sessions ?<br><br>Best regards<font color="#888888"><br>Adrien MOULIN</font></div>