[Pkg-auth-maintainers] Bug#888892: No permission on U2F security key

[Kurt Roeckx]

On Wed, Jan 31, 2018 at 09:24:44PM +0100, Michael Biebl wrote:
> Am 31.01.2018 um 21:09 schrieb Kurt Roeckx:
> > On Wed, Jan 31, 2018 at 08:56:40PM +0100, Michael Biebl wrote:
> >> Am 31.01.2018 um 20:13 schrieb Kurt Roeckx:
> >>> On Wed, Jan 31, 2018 at 06:24:41PM +0100, Michael Biebl wrote:
> >>>> Am 31.01.2018 um 18:20 schrieb Kurt Roeckx:
> >>>>
> >>>>> This is all not related to my issue, that while having udev rules
> >>>>> to set permissions I do not get them.
> >>>>
> >>>> Then I have no idea what your problem is.
> >>>
> >>> The problem is fixed if I remove consolekit and install
> >>> libpam-systemd
> >>
> >> Hm, right. On any system but a barebones server or container, you should
> >> have libpam-systemd installed. That's why it has priority standard and
> >> is recommended by systemd.
> >>
> >> consolekit should be uninstalled. I doesn't do anything useful anymore
> >> since jessie. I wasn't aware that it is actually harmful these days, though.
> >> Maybe we should add a Conflicts somewhere to force its removal. Thoughts?
> > 
> > So should conselekit be removed from the archive (on the linux
> > arches)? 
> 
> I think so. I already had such a change made years ago but never
> uploaded that to the archive (at that time, we didn't have sourceful
> uploads, so this would have been tricky, as I would have needed a
> kfreebsd build system).
> 
> > And if so, why not a Depends instead of a Recommends?
> 
> You mean in systemd? Maybe we should. So far we were overly cautious to
> not upset anyone and enforce anything unless absolutely necessary (as
> said, there are use cases, like single-user bare-bones installations
> where you don't strictly need libpam-systemd so should have the
> opportunity to uninstall it).
> History has taught me though, that there are much more users who have
> disabled Recommends and ran into issues because libpam-systemd was not
> installed.
> (libpam-systemd is responsible to register a logind session when you
> actually login. This is then used by systemd-logind to apply devices
> permissions and sorts of other stuff).

I didn't check why, but when I removed consolekit, libpam-systemd
was installed instead. This seems to be why:
lightdm Depends libpam-systemd | consolekit

Maybe lightdm should drop the alternative?


Kurt