Broken admin authentication in pamac-manager and timeshift

[jqv]

Oups… It looks like I suddenly lost gui admin functions in cinnamon and I have no idea why. If I start timeshift nothing happens, if I run tieshift-gtk from terminal I get a Admin Access required popup error and pamac-manager gives me authentication failure. Did try reinstall polkit-gnome (pamac in terminal work fine) but did not change anything. Any hints are greatly appreciated!

my inxi

$ inxi --admin --verbosity=7 --filter --width
System:
  Kernel: 5.18.7-1-MANJARO arch: x86_64 bits: 64 compiler: gcc v: 12.1.0
    parameters: BOOT_IMAGE=/boot/vmlinuz-5.18-x86_64
    root=UUID=f657ea71-cca9-4d7c-9550-42aa84924c79 rw quiet apparmor=1
    security=apparmor udev.log_priority=3
  Desktop: Cinnamon v: 5.4.2 tk: GTK v: 3.24.34 vt: 7 dm: LightDM v: 1.30.0
    Distro: Manjaro Linux base: Arch Linux
Machine:
  Type: Desktop Mobo: Intel model: D54250WYK v: H13922-303
    serial: <superuser required> BIOS: Intel v: WYLPT10H.86A.0054.2019.0902.1752
    date: 09/02/2019
Battery:
  Message: No system battery data found. Is one present?
Memory:
  RAM: total: 15.53 GiB used: 4.26 GiB (27.4%)
  RAM Report:
    permissions: Unable to run dmidecode. Root privileges required.
CPU:
  Info: model: Intel Core i5-4250U bits: 64 type: MT MCP arch: Haswell
    gen: core 4 built: 2013-15 process: Intel 22nm family: 6 model-id: 0x45 (69)
    stepping: 1 microcode: 0x26
  Topology: cpus: 1x cores: 2 tpc: 2 threads: 4 smt: enabled cache:
    L1: 128 KiB desc: d-2x32 KiB; i-2x32 KiB L2: 512 KiB desc: 2x256 KiB
    L3: 3 MiB desc: 1x3 MiB
  Speed (MHz): avg: 1195 high: 1297 min/max: 800/2600 scaling:
    driver: intel_cpufreq governor: schedutil cores: 1: 1297 2: 1071 3: 1115
    4: 1297 bogomips: 15168
  Flags: abm acpi aes aperfmperf apic arat arch_perfmon avx avx2 bmi1 bmi2
    bts clflush cmov constant_tsc cpuid cpuid_fault cx16 cx8 de ds_cpl dtes64
    dtherm dts epb ept ept_ad erms est f16c flexpriority flush_l1d fma fpu
    fsgsbase fxsr ht ibpb ibrs ida invpcid invpcid_single lahf_lm lm mca mce
    md_clear mmx monitor movbe msr mtrr nonstop_tsc nopl nx pae pat pbe pcid
    pclmulqdq pdcm pdpe1gb pebs pge pln pni popcnt pse pse36 pti pts rdrand
    rdtscp rep_good sdbg sep smep ss ssbd sse sse2 sse4_1 sse4_2 ssse3 stibp
    syscall tm tm2 tpr_shadow tsc tsc_adjust tsc_deadline_timer vme vmx vnmi
    vpid x2apic xsave xsaveopt xtopology xtpr
  Vulnerabilities:
  Type: itlb_multihit status: KVM: VMX disabled
  Type: l1tf
    mitigation: PTE Inversion; VMX: conditional cache flushes, SMT vulnerable
  Type: mds mitigation: Clear CPU buffers; SMT vulnerable
  Type: meltdown mitigation: PTI
  Type: mmio_stale_data status: Not affected
  Type: spec_store_bypass
    mitigation: Speculative Store Bypass disabled via prctl
  Type: spectre_v1
    mitigation: usercopy/swapgs barriers and __user pointer sanitization
  Type: spectre_v2 mitigation: Retpolines, IBPB: conditional, IBRS_FW,
    STIBP: conditional, RSB filling
  Type: srbds mitigation: Microcode
  Type: tsx_async_abort status: Not affected
Graphics:
  Device-1: Intel Haswell-ULT Integrated Graphics driver: i915 v: kernel
    arch: Gen7.5 process: Intel 22nm built: 2013 ports: active: HDMI-A-1
    empty: DP-1,HDMI-A-2 bus-ID: 00:02.0 chip-ID: 8086:0a26 class-ID: 0300
  Device-2: webcam type: USB driver: snd-usb-audio,uvcvideo bus-ID: 1-1.2:3
    chip-ID: 1d6c:0103 class-ID: 0102 serial: <filter>
  Display: x11 server: X.Org v: 21.1.3 driver: X: loaded: modesetting
    alternate: fbdev,vesa gpu: i915 display-ID: :0 screens: 1
  Screen-1: 0 s-res: 1920x1080 s-dpi: 96 s-size: 508x285mm (20.00x11.22")
    s-diag: 582mm (22.93")
  Monitor-1: HDMI-A-1 mapped: HDMI-1 model: ViewSonic TD2340 SERIES
    serial: <filter> built: 2013 res: 1920x1080 hz: 60 dpi: 96 gamma: 1.2
    size: 509x286mm (20.04x11.26") diag: 584mm (23") ratio: 16:9 modes:
    max: 1920x1080 min: 720x400
  Message: Unable to show GL data. Required tool glxinfo missing.
Audio:
  Device-1: Intel Haswell-ULT HD Audio driver: snd_hda_intel v: kernel
    bus-ID: 1-1.2:3 chip-ID: 1d6c:0103 class-ID: 0102 serial: <filter>
  Device-2: Intel 8 Series HD Audio driver: snd_hda_intel v: kernel
    bus-ID: 00:1b.0 chip-ID: 8086:9c20 class-ID: 0403
  Device-3: webcam type: USB driver: snd-usb-audio,uvcvideo
  Sound Server-1: ALSA v: k5.18.7-1-MANJARO running: yes
  Sound Server-2: PulseAudio v: 16.1 running: yes
  Sound Server-3: PipeWire v: 0.3.52 running: yes
Network:
  Device-1: Intel Ethernet I218-V driver: e1000e v: kernel port: f080
    bus-ID: 00:19.0 chip-ID: 8086:1559 class-ID: 0200
  IF: eno1 state: up speed: 1000 Mbps duplex: full mac: <filter>
  IP v4: <filter> type: dynamic noprefixroute scope: global
    broadcast: <filter>
  IP v6: <filter> type: noprefixroute scope: link
  Device-2: Intel Wireless 7260 driver: iwlwifi v: kernel pcie: gen: 1
    speed: 2.5 GT/s lanes: 1 bus-ID: 02:00.0 chip-ID: 8086:08b1 class-ID: 0280
  IF: wlp2s0 state: up mac: <filter>
  IP v4: <filter> type: dynamic noprefixroute scope: global
    broadcast: <filter>
  IP v6: <filter> type: noprefixroute scope: link
  WAN IP: <filter>
Bluetooth:
  Device-1: Intel Bluetooth wireless interface type: USB driver: btusb v: 0.8
    bus-ID: 1-1.7:6 chip-ID: 8087:07dc class-ID: e001
  Report: bt-adapter ID: hci0 rfk-id: 0 state: up address: <filter>
Logical:
  Message: No logical block device data found.
RAID:
  Message: No RAID data found.
Drives:
  Local Storage: total: 1.82 TiB used: 1.32 TiB (72.6%)
  SMART Message: Required tool smartctl not installed. Check --recommends
  ID-1: /dev/sda maj-min: 8:0 vendor: Samsung model: SSD 850 EVO 1TB
    size: 931.51 GiB block-size: physical: 512 B logical: 512 B speed: 6.0 Gb/s
    type: SSD serial: <filter> rev: 2B6Q scheme: MBR
  ID-2: /dev/sdb maj-min: 8:16 type: USB vendor: Western Digital
    model: WD My Book 1140 size: 931.48 GiB block-size: physical: 512 B
    logical: 512 B type: N/A serial: <filter> rev: 1012 scheme: MBR
  Message: No optical or floppy data found.
Partition:
  ID-1: / raw-size: 93.32 GiB size: 91.3 GiB (97.83%) used: 40.48 GiB (44.3%)
    fs: ext4 dev: /dev/sda1 maj-min: 8:1 label: N/A
    uuid: f657ea71-cca9-4d7c-9550-42aa84924c79
  ID-2: /home raw-size: 823.29 GiB size: 810.17 GiB (98.41%)
    used: 518.9 GiB (64.0%) fs: ext4 dev: /dev/sda5 maj-min: 8:5 label: N/A
    uuid: 4f19f012-020f-43ab-8c10-7a114deaec38
  ID-3: /run/media/jorgen/bigdisk raw-size: 931.48 GiB
    size: 916.67 GiB (98.41%) used: 792.34 GiB (86.4%) fs: ext4 dev: /dev/sdb1
    maj-min: 8:17 label: bigdisk uuid: bec6cc97-3a60-42e8-8b09-8e77363a2107
Swap:
  Alert: No swap data was found.
Unmounted:
  ID-1: /dev/sda2 maj-min: 8:2 size: 1 KiB fs: <superuser required> label: N/A
    uuid: N/A
  ID-2: /dev/sda6 maj-min: 8:6 size: 14.9 GiB fs: swap label: N/A
    uuid: 650fe82c-7262-4579-99c6-e9790e524522
USB:
  Hub-1: 1-0:1 info: Full speed or root hub ports: 2 rev: 2.0 speed: 480 Mb/s
    chip-ID: 1d6b:0002 class-ID: 0900
  Hub-2: 1-1:2 info: Intel Integrated Rate Matching Hub ports: 8 rev: 2.0
    speed: 480 Mb/s chip-ID: 8087:8000 class-ID: 0900
  Device-1: 1-1.1:10 info: Western Digital My Book Essential (WDBACW)
    type: Mass Storage driver: usb-storage interfaces: 1 rev: 2.1
    speed: 480 Mb/s power: 8mA chip-ID: 1058:1140 class-ID: 0806
    serial: <filter>
  Device-2: 1-1.2:3 info: webcam type: Video,Audio
    driver: snd-usb-audio,uvcvideo interfaces: 4 rev: 2.0 speed: 480 Mb/s
    power: 500mA chip-ID: 1d6c:0103 class-ID: 0102 serial: <filter>
  Hub-3: 1-1.3:4 info: Genesys Logic Hub ports: 4 rev: 2.0 speed: 480 Mb/s
    power: 100mA chip-ID: 05e3:0610 class-ID: 0900
  Device-1: 1-1.3.1:9 info: eTurboTouch TD2340 230 SP13005 Touch Panel
    type: HID driver: hid-generic,hid-multitouch,usbhid interfaces: 2 rev: 2.0
    speed: 12 Mb/s power: 500mA chip-ID: 22b9:0021 class-ID: 0300
  Hub-4: 1-1.4:5 info: VIA Labs VL813 Hub ports: 4 rev: 2.1 speed: 480 Mb/s
    chip-ID: 2109:2813 class-ID: 0900
  Device-1: 1-1.4.1:7 info: Shenzhen Rapoo 2.4G Wireless Device Serial
    type: Keyboard,Mouse driver: hid-generic,usbhid interfaces: 2 rev: 1.1
    speed: 12 Mb/s power: 100mA chip-ID: 24ae:2000 class-ID: 0301
  Device-2: 1-1.4.2:8 info: Xenta 2.4G Receiver type: Keyboard,Mouse,HID
    driver: hid-generic,usbhid interfaces: 3 rev: 1.1 speed: 12 Mb/s
    power: 100mA chip-ID: 1d57:fa60 class-ID: 0300
  Device-3: 1-1.7:6 info: Intel Bluetooth wireless interface type: Bluetooth
    driver: btusb interfaces: 2 rev: 2.0 speed: 12 Mb/s power: 100mA
    chip-ID: 8087:07dc class-ID: e001
Sensors:
  System Temperatures: cpu: 44.0 C mobo: N/A
  Fan Speeds (RPM): N/A
Info:
  Processes: 215 Uptime: 46m wakeups: 0 Init: systemd v: 251
  default: graphical tool: systemctl Compilers: gcc: 12.1.0 clang: 13.0.1
  Packages: 1618 pacman: 1602 lib: 427 flatpak: 5 snap: 11 Shell: Bash
  v: 5.1.16 running-in: gnome-terminal inxi: 3.3.19

[bogdancovaciu]

Have you checked the forum?

Pamac authentication failure

Hey everyone /proc contains information about all processes running on the system. By default this is accessible to all users. This can allows an attacker to spy a lot on other processes. To allow users to only see their own processes, edit /etc/fstab and add proc /proc proc nosuid,nodev,noexec,hidepid=2,gid=proc 0 0 systemd-logind still needs to see other users’ processes so, for user sessions to work correctly add this to /etc/systemd/system/systemd-logind.service.d/hidepid.conf [Servic…

Pamac 10.1.0beta-1 authentication failure

I have a RPI4 set up with manjaro XFCE on arm-testing branch. My pamac version is 10.1.0beta-1. No monitor is connected now but I used to have one and I will have a new one at the end of the week. When I try pamac update -a, even it doesn’t see some packages to updaten, I get this error (translated) : $ pamac update Preparation… Error: Authentication failed And in journalctl (-xf) : Apr 05 21:35:19 rpi48-manjaro dbus-daemon[378]: [system] Activating via systemd: service name=‘org.…

Pamac authorization

When using pamac-manager, it asks for authorization. The only password that works is the password for the account that was created at initial setup. I am currently using a network account which can use sudo on this machine. It seems that only the initial local account password works, not the account used to start pamac-manager. I do not see a separate pam module for pamac, so I assume it uses the standard su pam.d module. Edit: I think this is the crux of the issue: Jun 23 09:29:14 manjaro pol…

Polkit-1 and the original account name

Aug 23 08:54:44 rpi polkit-agent-helper-1[19494]: pam_sss(polkit-1:auth): authentication failure; logname= uid=558 euid=0 tty= ruser=support rhost= user=support Aug 23 08:54:44 rpi polkit-agent-helper-1[19494]: pam_sss(polkit-1:auth): received for user support: 10 (User not known to the underlying authentication module) It would seem pamac uses polkit-1 to authenticate, but it passes the account name of support which is the account originally created during the install. I would think it should …

[jqv]

Thanks bogdancovaciu, missed the /etc/group check, added myself to polkit group as sugested in the old debian bug thread, but still no joy.

my /etc/group

root:x:0:root
adm:x:999:daemon,jorgen
wheel:x:998:jorgen,test
kmem:x:997:
tty:x:5:
utmp:x:996:
audio:x:995:jorgen
disk:x:994:
input:x:993:
kvm:x:992:
lp:x:991:cups,jorgen
optical:x:990:jorgen
render:x:989:
storage:x:988:
uucp:x:987:
video:x:986:jorgen
users:x:985:
sys:x:3:bin,jorgen
mem:x:8:
ftp:x:11:
mail:x:12:
log:x:19:
smmsp:x:25:
proc:x:26:polkitd
games:x:50:
lock:x:54:
network:x:90:jorgen
floppy:x:94:
scanner:x:96:jorgen
power:x:98:jorgen
systemd-journal:x:984:
rfkill:x:983:
nobody:x:65534:
dbus:x:81:
bin:x:1:daemon
daemon:x:2:bin
http:x:33:
systemd-journal-remote:x:982:
systemd-network:x:981:
systemd-resolve:x:980:
systemd-timesync:x:979:
systemd-coredump:x:978:
uuidd:x:68:
dhcpcd:x:977:
dnsmasq:x:976:
rpc:x:32:
ntp:x:87:
avahi:x:975:
colord:x:974:
cups:x:209:
deluge:x:973:
flatpak:x:972:
geoclue:x:971:
git:x:970:
lightdm:x:969:
nm-openconnect:x:968:
nm-openvpn:x:967:
polkitd:x:102:
rtkit:x:133:
usbmux:x:140:
jorgen:x:1000:
vboxusers:x:108:
cdrom:x:1001:jorgen
clamav:x:64:
autologin:x:966:jorgen,test
openvpn:x:965:
named:x:40:
test:x:1002:test
saned:x:964:
adbusers:x:963:jorgen
sgx:x:962:
systemd-oom:x:961:
tss:x:960:

Did try another login with admin rights and that works fine, so it seems that something in my personal login is messed up. How can i investigate further? Can not find anything in journalctl when fails in the gui is shown or am I looking in the wrong place?

[jqv]

Just a quick follow up: After trying to dig deeper with no luck for a long time I finally gave up. Rolled back to a early snapshot so now I know that my backup works after 2 years with Manjaro
Surprisingly easy: Booted a live usb image of the latest Community Cinnamon Desktop version and just ran timeshift --restore in a terminal with my external backup disk hooked up answering in the prompt where my files where, took half an hour or so. Then normal boot, problem gone, did the pamac upgrade again. And voilà: everything works - like magic! Absolutely no idea why but I am happy