Broken admin authentication in pamac-manager and timeshift

[anon89812132]

Have you checked the forum?

Pamac authentication failure

Hey everyone /proc contains information about all processes running on the system. By default this is accessible to all users. This can allows an attacker to spy a lot on other processes. To allow users to only see their own processes, edit /etc/fstab and add proc /proc proc nosuid,nodev,noexec,hidepid=2,gid=proc 0 0 systemd-logind still needs to see other users’ processes so, for user sessions to work correctly add this to /etc/systemd/system/systemd-logind.service.d/hidepid.conf [Servic…

Pamac 10.1.0beta-1 authentication failure

I have a RPI4 set up with manjaro XFCE on arm-testing branch. My pamac version is 10.1.0beta-1. No monitor is connected now but I used to have one and I will have a new one at the end of the week. When I try pamac update -a, even it doesn’t see some packages to updaten, I get this error (translated) : $ pamac update Preparation… Error: Authentication failed And in journalctl (-xf) : Apr 05 21:35:19 rpi48-manjaro dbus-daemon[378]: [system] Activating via systemd: service name=‘org.…

Pamac authorization

When using pamac-manager, it asks for authorization. The only password that works is the password for the account that was created at initial setup. I am currently using a network account which can use sudo on this machine. It seems that only the initial local account password works, not the account used to start pamac-manager. I do not see a separate pam module for pamac, so I assume it uses the standard su pam.d module. Edit: I think this is the crux of the issue: Jun 23 09:29:14 manjaro pol…

Polkit-1 and the original account name

Aug 23 08:54:44 rpi polkit-agent-helper-1[19494]: pam_sss(polkit-1:auth): authentication failure; logname= uid=558 euid=0 tty= ruser=support rhost= user=support Aug 23 08:54:44 rpi polkit-agent-helper-1[19494]: pam_sss(polkit-1:auth): received for user support: 10 (User not known to the underlying authentication module) It would seem pamac uses polkit-1 to authenticate, but it passes the account name of support which is the account originally created during the install. I would think it should …