Bug 976640

Created attachment 763651 [details]
journalctl -a output after reproducing this (login finally succeeds at 01:05:46 when org.freedesktop.ConsoleKit times out)

ConsoleKit is deprecated. I would advise reassigning this to the proper component as there is not much I can do about it.

ConsoleKit *is* the proper component. it's the component causing the problem.

ConsoleKit code hasn't changed since F18 and probably older. NOTHING has changed in ConsoleKit.

Jun 21 01:05:21 localhost.localdomain console-kit-daemon[870]: console-kit-daemon[870]: WARNING: Failed to acquire org.freedesktop.ConsoleKit: An SELinux policy prevents this sender from sending this message to this recipient, 0 matched rules; type="method_call", sender=":1.11" (uid=0 pid=437 comm="/bin/login --      ") interface="org.freedesktop.ConsoleKit.Manager" member="OpenSessionWithParameters" error name="(unset)" requested_reply="0" destination="org.freedesktop.ConsoleKit" (uid=0 pid=870 comm="/usr/sbin/console-kit-daemon --no-daemon ")
Jun 21 01:05:21 localhost.localdomain console-kit-daemon[870]: WARNING: Failed to acquire org.freedesktop.ConsoleKit: An SELinux policy prevents this sender from sending this message to this recipient, 0 matched rules; type="method_call", sender=":1.11" (uid=0 pid=437 comm="/bin/login --      ") interface="org.freedesktop.ConsoleKit.Manager" member="OpenSessionWithParameters" error name="(unset)" requested_reply="0" 


Nothing is supposed to depend on ConsoleKit according to Lennart, we both know that was a stupid assumption, which is why I took ownership of the package. What do you want me to do?

Ref: https://lists.fedoraproject.org/pipermail/devel/2013-February/178478.html

Also see: https://fedoraproject.org/wiki/Features/ckremoval

That feature is not complete. Things *do* still depend on CK. They have not been migrated off of it. In the mean time, it is still a component of the distro and bugs in it need to be fixed. If you don't want to fix them, you need to orphan the component, not close the bugs.

In this specific case, lxsession is what depends on CK, so effectively, our LXDE desktop and spin are tied to it.

Please try with selinux policy-55

https://bugzilla.redhat.com/show_bug.cgi?id=975897

Fixed in selinux-policy-55/56+

How the flying fuck does that make it 'upstream'?

selinux-policy-3.12.1-57.fc19 has been submitted as an update for Fedora 19.
https://admin.fedoraproject.org/updates/selinux-policy-3.12.1-57.fc19

Package selinux-policy-3.12.1-57.fc19:
* should fix your issue,
* was pushed to the Fedora 19 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing selinux-policy-3.12.1-57.fc19'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2013-11846/selinux-policy-3.12.1-57.fc19
then log in and leave karma (feedback).

This seem to fix the issue after the filesystem is relabeled.

(touch /.autorelabel)

selinux-policy-3.12.1-57.fc19 has been pushed to the Fedora 19 stable repository.  If problems still persist, please make note of it in this bug report.

Hello, I seem to be experiencing the same problem as Adam.

I have selinux-policy-3.12.1-66.fc19 installed but I am getting the same message in journalctl and slow login as the original poster experienced.

Jul 28 18:42:33 aidan-fedora console-kit-daemon[851]: WARNING: Failed to acquire org.freedesktop.ConsoleKit: An SELinux policy prevents this sender from sending this message to this recipient, 0 matched rules; type="method_call", sender=":1.10" (uid=0 pid=401 comm="/bin/login --     ") interface="org.freedesktop.ConsoleKit.Manager" member="OpenSessionWithParameters" error name="(unset)" requested_reply="0" destination="org.freedesktop.ConsoleKit" (uid=0 pid=851 comm="/usr/sbin/console-kit-daemon --no-daemon ")
Jul 28 18:42:58 aidan-fedora login[401]: LOGIN ON tty1 BY orr

Could you try to execute

# yum reinstall selinux-policy-targeted

# matchpathcon /usr/sbin/console-kit-daemon

# ls -Z  /usr/sbin/console-kit-daemon

yum reinstalled the package without error as expected

# matchpathcon /usr/sbin/console-kit-daemon
/usr/sbin/console-kit-daemon	system_u:object_r:consolekit_exec_t:s0

# ls -Z /usr/sbin/console-kit-daemon
-rwxr-xr-x. root root system_u:object_r:bin_t:s0       /usr/sbin/console-kit-daemon

# restorecon -R -v /usr/sbin

will fix it. 

Did you install F19 as a fresh install?

Thank you, that worked. Logins are instant like they used to be.

>Did you install F19 as a fresh install?

No, I upgraded from 18 to 19 using fedup.

Had the same issue, solved by followqing instructions above.

# yum reinstall selinux-policy-targeted
# restorecon -R -v /usr/sbin


====================0
System: Fresh install of Fedora 19 (Network install done on 17th Oct), using old /home
selinux-policy-targeted 3.12.1-74.9
matchpathcon and ls -Z provided same resulst as on comment 17.

Just FYI.

Oh, forgot to mention: Installed with mate-desktop (if it matters)

Found related issue: fresh install of F19 LXDE spin, *all* logins were slow. Not just root. After running out of patience today when login-to-desktop-screen took 20 seconds, found this bug. Solution on top works:

# yum reinstall selinux-policy-targeted
# restorecon -R -v /usr/sbin

Prior-fix log output is below. Would recommend you to find a way to push the above fix during regular yum updates, if LXDE is installed.

Nov 22 10:54:47 localhost.localdomain systemd-logind[354]: New session 1 of user <user>.
Nov 22 10:54:47 localhost.localdomain lxdm-binary[966]: pam_unix(lxdm:session): session opened for user albert by (uid=0)
Nov 22 10:54:47 localhost.localdomain dbus[362]: [system] Activating via systemd: service name='org.freedesktop.ConsoleKit' unit='console-kit-daemon.service'
Nov 22 10:54:47 localhost.localdomain dbus-daemon[362]: dbus[362]: [system] Activating via systemd: service name='org.freedesktop.ConsoleKit' unit='console-kit-daemon.service'
Nov 22 10:54:47 localhost.localdomain systemd[1]: Starting Console Manager...
Nov 22 10:54:47 localhost.localdomain dbus-daemon[362]: dbus[362]: [system] Successfully activated service 'org.freedesktop.ConsoleKit'
Nov 22 10:54:47 localhost.localdomain dbus[362]: [system] Successfully activated service 'org.freedesktop.ConsoleKit'
Nov 22 10:54:47 localhost.localdomain console-kit-daemon[983]: console-kit-daemon[983]: WARNING: Failed to acquire org.freedesktop.ConsoleKit: An SELinux policy prevents this sender from sending this message 
Nov 22 10:54:47 localhost.localdomain console-kit-daemon[983]: console-kit-daemon[983]: WARNING: Could not acquire name; bailing out
Nov 22 10:54:47 localhost.localdomain console-kit-daemon[983]: WARNING: Failed to acquire org.freedesktop.ConsoleKit: An SELinux policy prevents this sender from sending this message to this recipient, 0 matc
Nov 22 10:54:47 localhost.localdomain console-kit-daemon[983]: WARNING: Could not acquire name; bailing out
Nov 22 10:54:47 localhost.localdomain systemd[1]: Started Console Manager.
Nov 22 10:54:47 localhost.localdomain systemd[1]: console-kit-daemon.service: main process exited, code=exited, status=1/FAILURE
Nov 22 10:54:47 localhost.localdomain systemd[1]: Unit console-kit-daemon.service entered failed state.
...
Nov 22 10:55:12 localhost.localdomain dbus-daemon[362]: dbus[362]: [system] Failed to activate service 'org.freedesktop.ConsoleKit': timed out
Nov 22 10:55:12 localhost.localdomain dbus[362]: [system] Failed to activate service 'org.freedesktop.ConsoleKit': timed out
...