[Pkg-auth-maintainers] Bug#888892: No permission on U2F security key

[Michael Biebl]

Am 31.01.2018 um 22:18 schrieb Kurt Roeckx:
> On Wed, Jan 31, 2018 at 09:24:44PM +0100, Michael Biebl wrote:
>> Am 31.01.2018 um 21:09 schrieb Kurt Roeckx:
>>> On Wed, Jan 31, 2018 at 08:56:40PM +0100, Michael Biebl wrote:
>>>> Am 31.01.2018 um 20:13 schrieb Kurt Roeckx:
>>>>> On Wed, Jan 31, 2018 at 06:24:41PM +0100, Michael Biebl wrote:
>>>>>> Am 31.01.2018 um 18:20 schrieb Kurt Roeckx:
>>>>>>
>>>>>>> This is all not related to my issue, that while having udev rules
>>>>>>> to set permissions I do not get them.
>>>>>>
>>>>>> Then I have no idea what your problem is.
>>>>>
>>>>> The problem is fixed if I remove consolekit and install
>>>>> libpam-systemd
>>>>
>>>> Hm, right. On any system but a barebones server or container, you should
>>>> have libpam-systemd installed. That's why it has priority standard and
>>>> is recommended by systemd.
>>>>
>>>> consolekit should be uninstalled. I doesn't do anything useful anymore
>>>> since jessie. I wasn't aware that it is actually harmful these days, though.
>>>> Maybe we should add a Conflicts somewhere to force its removal. Thoughts?
>>>
>>> So should conselekit be removed from the archive (on the linux
>>> arches)? 
>>
>> I think so. I already had such a change made years ago but never
>> uploaded that to the archive (at that time, we didn't have sourceful
>> uploads, so this would have been tricky, as I would have needed a
>> kfreebsd build system).
>>
>>> And if so, why not a Depends instead of a Recommends?
>>
>> You mean in systemd? Maybe we should. So far we were overly cautious to
>> not upset anyone and enforce anything unless absolutely necessary (as
>> said, there are use cases, like single-user bare-bones installations
>> where you don't strictly need libpam-systemd so should have the
>> opportunity to uninstall it).
>> History has taught me though, that there are much more users who have
>> disabled Recommends and ran into issues because libpam-systemd was not
>> installed.
>> (libpam-systemd is responsible to register a logind session when you
>> actually login. This is then used by systemd-logind to apply devices
>> permissions and sorts of other stuff).
> 
> I didn't check why, but when I removed consolekit, libpam-systemd
> was installed instead. This seems to be why:
> lightdm Depends libpam-systemd | consolekit
> 
> Maybe lightdm should drop the alternative?

That should definitely go, at least for the linux part.


-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-auth-maintainers/attachments/20180131/46503d84/attachment.sig>