Bug#676984: gnome-keyring:: couldn't connect to: .../.cache/keyring-N8Zux6/pkcs11: Permission denied

[Michael Welsh Duggan]

Michael Biebl <biebl at debian.org> writes:

> On 11.06.2012 00:09, Michael Welsh Duggan wrote:
>> Package: gnome-keyring
>> Version: 3.4.1-4
>> Severity: important
>> 
>> Dear Maintainer,
>> 
>> Since upgrading to 3.4.1, I am encountering the following warning when
>
> Upgrading from which version?

3.2.2-2

>> using sendmail:
>> 
>> md5i at maru:/usr/local/home/md5i$ sendmail -oi -odb < /tmp/foo 
>> WARNING: gnome-keyring:: couldn't connect to:
>> /home/md5i/.cache/keyring-N8Zux6/pkcs11: Permission denied
>
> Does sendmail change it's uid when executed?

Yes.  In the log below, uid 1000 is me (md5i).  uid 0 is root.  uid 10
is uucp.  uid 105 is Debian-exim.  It is obvious to me from this why
permission is denied.  I am wondering what allowed things to work before
and not now.

In retrospect, this may be an exim4 bug (feature?) instead since, after
looking the dpkg logs, it was upgraded at the same time from 4.77-1+b1
to 4.80-2.  There were a lot of TLS-related changes according to the
changelogs.  After looking at things closely, I can't be sure which
package upgrade is causing my problem.  I'll add exim4's maintainer
email to the CC list.

md5i at maru:/usr/local/home/md5i$ sendmail -oi -odb -d+uid < /tmp/foo 
Exim version 4.80 uid=1000 gid=1000 pid=1773 D=fbb95cfd
Berkeley DB: Berkeley DB 5.1.29: (October 25, 2011)
Support for: crypteq iconv() IPv6 PAM Perl Expand_dlfunc GnuTLS move_frozen_messages Content_Scanning DKIM Old_Demime
Lookups (built-in): lsearch wildlsearch nwildlsearch iplsearch cdb dbm dbmjz dbmnz dnsdb dsearch ldap ldapdn ldapm mysql nis nis0 passwd pgsql sqlite
Authenticators: cram_md5 cyrus_sasl dovecot plaintext spa
Routers: accept dnslookup ipliteral iplookup manualroute queryprogram redirect
Transports: appendfile/maildir/mailstore/mbx autoreply lmtp pipe smtp
Fixed never_users: 0
Size of off_t: 8
Compiler: GCC [4.7.0]
Library version: GnuTLS: Compile: 2.12.19
                         Runtime: 2.12.19
Library version: Cyrus SASL: Compile: 2.1.25
                             Runtime: 2.1.25 [Cyrus SASL]
Library version: PCRE: Compile: 8.30
                       Runtime: 8.30 2012-02-04
Total 19 lookups
Library version: MySQL: Compile: 5.5.24 [(Debian)]
                        Runtime: 5.5.24
Library version: SQLite: Compile: 3.7.12.1
                         Runtime: 3.7.12.1
WHITELIST_D_MACROS: "OUTGOING"
TRUSTED_CONFIG_LIST: "/etc/exim4/trusted_configs"
changed uid/gid: forcing real = effective
  uid=0 gid=1000 pid=1773
  auxiliary group list: <none>
seeking password data for user "uucp": cache not available
getpwnam() succeeded uid=10 gid=10
changed uid/gid: calling tls_validate_require_cipher
  uid=105 gid=105 pid=1774
  auxiliary group list: <none>
WARNING: gnome-keyring:: couldn't connect to: /home/md5i/.cache/keyring-N8Zux6/pkcs11: Permission denied
tls_validate_require_cipher child 1774 ended: status=0x0
configuration file is /var/lib/exim4/config.autogenerated
log selectors = 00000ffc 00612001
cwd=/usr/local/home/md5i 4 args: sendmail -oi -odb -d+uid
exim: debugging permission denied


-- 
Michael Welsh Duggan
(md5i at md5i.com)