Bug#1061444: pcscd: GDM user is NOT authorized for action: access_pcsc

[Laurent Bigonville]

Package: pcscd
Version: 2.0.1-1
Severity: normal
X-Debbugs-Cc: debian-g...@lists.debian.org

Hello,

When looking at the logs of pcscd, I see the following messages:

jan 22 09:47:37 edoras pcscd[1663]: 00000000 auth.c:125:IsClientAuthorized() Error in authorization: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Process not found
jan 22 09:47:37 edoras pcscd[1663]: 00000031 auth.c:143:IsClientAuthorized() Process 1565 (user: 115) is NOT authorized for action: access_pcsc

It seems that GDM is not allowed to talk to pcscd.

GDM has the functionality to detect whether there is a smartcard in the
reader and then use the gdm-smartcard PAM service instead of the
gdm-password one to perform login.

I guess that GDM should be whitelisted to allow it to use pcscd?

Kind regards,
Laurent Bigonville

-- System Information:
Debian Release: trixie/sid
APT prefers unstable-debug
APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1, 'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 6.6.11-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=fr_BE.UTF-8, LC_CTYPE=fr_BE.UTF-8 (charmap=UTF-8), LANGUAGE=fr_BE:fr
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: SELinux: enabled - Mode: Permissive - Policy name: refpolicy

Versions of packages pcscd depends on:
ii init-system-helpers 1.66
ii libc6 2.37-13
ii libccid [pcsc-ifd-handler] 1.5.5-1
ii libglib2.0-0 2.78.3-1
ii libpcsclite1 2.0.1-1
ii libpolkit-gobject-1-0 124-1
ii libsystemd0 255.2-4
ii libudev1 255.2-4

pcscd recommends no packages.

Versions of packages pcscd suggests:
ii systemd 255.2-4

-- no debconf information