[Fingerforce-devel] Bug#982902: fprintd: Enroll not authorized

[Marco Trevisan]

Hi,

On Tue, 16 Feb 2021 08:47:33 +0200 Martin Paljak
<martin at martinpaljak.net> wrote:
> Package: fprintd
> Version: 1.90.9-1
> Severity: important
>
> Dear Maintainer,
>
> After upgrading from version 0.8, flushing print database as requested by NEWS,
> I can not enroll fresh prints, due to missing permissions

This is an expected behavior if you don't have permissions.

> $ fprintd-enroll
> Using device /net/reactivated/Fprint/Device/0
> Enrolling right-index-finger finger.
> EnrollStart failed: GDBus.Error:net.reactivated.Fprint.Error.PermissionDenied: Not Authorized: net.reactivated.fprint.device.enroll

> Enrolling works for root (but I don't use fingerprints with root)

If you don't have the polkit daemon running, you can still use root
passing the user you want enroll for to fprintd-enroll as argument

  # fprintd-enroll user

Should work.

As per the polkit detection it's under the fprintd scope, sorry. it's
expected to be around in any UI-based setup.

> -- System Information:
> Debian Release: bullseye/sid
>   APT prefers stable
>   APT policy: (700, 'stable'), (650, 'testing'), (500, 'stable-updates')
> Architecture: amd64 (x86_64)
> Foreign Architectures: i386
>
> Kernel: Linux 5.10.16 (SMP w/32 CPU threads)
> Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_GB.UTF-8), LANGUAGE=en_GB:en
> Shell: /bin/sh linked to /usr/bin/dash
> Init: systemd (via /run/systemd/system)
> LSM: AppArmor: enabled
>
> Versions of packages fprintd depends on:
> ii  dbus                   1.12.20-1
> ii  libc6                  2.31-9
> ii  libfprint-2-2          1:1.90.7-2
> ii  libglib2.0-0           2.66.6-2
> ii  libpolkit-gobject-1-0  0.105-30
> ii  policykit-1            0.105-30
>
> fprintd recommends no packages.
>
> fprintd suggests no packages.
>
> -- no debconf information
>
>