[Fingerforce-devel] Bug#976990: fprintd: Latest update broke fprintd entirely

[Asher Gordon]

Package: fprintd
Version: 1.90.5-2
Severity: grave
X-Debbugs-Cc: Asher Gordon <AsDaGo at posteo.net>

Dear Maintainer,

After upgrading fprintd (and libpam-fprintd) from 1.90.1-2 to 1.90.5-2,
it stopped working entirely. Instead of fingerprint authentication,
password authentication is used for login and sudo. I have checked that
/etc/pam.d/common-auth has the right settings.

The problem appears to be that fprintd itself has stopped working, not
the PAM module (which is why I reported this bug in fprintd rather than
libpam-fprintd). When I use any of the fprintd-* commands, it fails as
follows:

    $ fprintd-delete asher
    Impossible to get devices: GDBus.Error:org.freedesktop.DBus.Error.AccessDenied: Rejected send message, 1 matched rules; type="method_call", sender=":1.184" (uid=1000 pid=15139 comm="fprintd-delete asher ") interface="net.reactivated.Fprint.Manager" member="GetDevices" error name="(unset)" requested_reply="0" destination=":1.185" (uid=0 pid=15143 comm="/usr/libexec/fprintd ")
    $ fprintd-enroll asher
    Impossible to enroll: GDBus.Error:org.freedesktop.DBus.Error.AccessDenied: Rejected send message, 1 matched rules; type="method_call", sender=":1.186" (uid=1000 pid=15151 comm="fprintd-enroll asher ") interface="net.reactivated.Fprint.Manager" member="GetDefaultDevice" error name="(unset)" requested_reply="0" destination=":1.185" (uid=0 pid=15143 comm="/usr/libexec/fprintd ")
    $ fprintd-list asher
    Impossible to get devices: GDBus.Error:org.freedesktop.DBus.Error.AccessDenied: Rejected send message, 1 matched rules; type="method_call", sender=":1.188" (uid=1000 pid=15165 comm="fprintd-list asher ") interface="net.reactivated.Fprint.Manager" member="GetDevices" error name="(unset)" requested_reply="0" destination=":1.185" (uid=0 pid=15143 comm="/usr/libexec/fprintd ")
    $ fprintd-verify 
    Impossible to verify: GDBus.Error:org.freedesktop.DBus.Error.AccessDenied: Rejected send message, 1 matched rules; type="method_call", sender=":1.189" (uid=1000 pid=15169 comm="fprintd-verify ") interface="net.reactivated.Fprint.Manager" member="GetDefaultDevice" error name="(unset)" requested_reply="0" destination=":1.185" (uid=0 pid=15143 comm="/usr/libexec/fprintd ")

From the org.freedesktop.DBus.Error.AccessDenied error, it seems that it
might be a permissions problem. However, the commands do not work, even
when run as root:

    $ sudo fprintd-list asher
    [sudo] password for asher: 
    Impossible to get devices: GDBus.Error:org.freedesktop.DBus.Error.AccessDenied: Rejected send message, 1 matched rules; type="method_call", sender=":1.199" (uid=0 pid=15422 comm="fprintd-list asher ") interface="net.reactivated.Fprint.Manager" member="GetDevices" error name="(unset)" requested_reply="0" destination=":1.200" (uid=0 pid=15425 comm="/usr/libexec/fprintd ")

All the above commands returned with an exit status of 1.

Also, if I run /usr/libexec/fprintd manually, I get the following
warning (although a 0 exit status):

    $ /usr/libexec/fprintd

    (fprintd:15733): fprintd-WARNING **: 13:01:49.856: Failed to get name: net.reactivated.Fprint

Perhaps this is because fprintd is already running. However
'ps -fe | grep [f]printd' lists no processes.

Thanks,
Asher

-- System Information:
Debian Release: bullseye/sid
  APT prefers testing-debug
  APT policy: (500, 'testing-debug'), (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 5.9.0-4-amd64 (SMP w/2 CPU threads)
Kernel taint flags: TAINT_FIRMWARE_WORKAROUND
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages fprintd depends on:
ii  dbus                   1.12.20-1
ii  libc6                  2.31-5
ii  libfprint-2-2          1:1.90.5-2
ii  libglib2.0-0           2.66.3-2
ii  libpolkit-gobject-1-0  0.105-29
ii  policykit-1            0.105-29

fprintd recommends no packages.

fprintd suggests no packages.

-- no debconf information

-- 
By necessity, by proclivity, and by delight, we all quote.  In fact, it is as
difficult to appropriate the thoughts of others as it is to invent.
		-- R. Emerson
		-- Quoted from a fortune cookie program
		(whose author claims, "Actually, stealing IS easier.")
		[to which I reply, "You think it's easy for me to
		misconstrue all these misquotations?!?"  Ed.]
                               --------
I prefer to send and receive mail encrypted. Please send me your
public key, and if you do not have my public key, please let me
know. Thanks.

GPG fingerprint: 38F3 975C D173 4037 B397  8095 D4C9 C4FC 5460 8E68
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 251 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/fingerforce-devel/attachments/20201209/7818fa2f/attachment.sig>