Bug 746733 - policykit doesn't work when using compiz-gnome
Summary: policykit doesn't work when using compiz-gnome
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: compiz
Version: 16
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Orphan Owner
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-10-17 16:22 UTC by Laine Stump
Modified: 2012-02-04 02:43 UTC (History)
5 users (show)

Fixed In Version: compiz-0.9.5.92.1-0.2.gite676f1b12eb8db3a76978eed5bfc7c2cf9a0b6ce.fc16
Clone Of:
Environment:
F16-beta x86_64 + updates as of 2011-10-17
Last Closed: 2012-02-02 17:31:33 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
polkit-gnome_classic-authentication-agent-1.desktop (320 bytes, application/x-desktop)
2011-11-14 20:42 UTC, leigh scott
no flags Details
compiz-authentication-agent.desktop (335 bytes, application/x-desktop)
2011-11-14 21:06 UTC, leigh scott
no flags Details

Description Laine Stump 2011-10-17 16:22:13 UTC
Description of problem:

When logged in with a "Classic GNOME with Compiz" session, any application that requires root authentication via policykit will fail to authenticate (before even asking for the password).

Version-Release number of selected component (if applicable):

compiz-gnome-0.9.5.0-4.fc16.x86_64

How reproducible: Every time.


Steps to Reproduce:
1. Install compiz-gnome package
2. When logging in, select "Classic GNOME with Compiz" session from the dialog. 
3. Try to use anything that requires policykit (e.g. firewall manager, virt-manager, etc)
  
Actual results:

root authentication will fail before even asking for a password.

Expected results:

user should be presented with a dialog box asking for root password, and application should continue after successful entry of password.

Additional info:

The identical system works properly when I log in with a standard gnome session, both gnome shell and gnome shell in fallback mode.

Since I skipped F15, this is the first I've tried the compiz-gnome package, so I'm not sure how long this problem has existed.

Comment 1 Fedora Update System 2011-10-18 15:19:09 UTC
compiz-fusion-extras-0.9.5.92-1.fc16, compizconfig-backend-gconf-0.9.5.92-0.1.gitf9ac54186bb62d00b28adc335220dba39a04b702.fc16, ccsm-0.9.5.92-1.fc16, compizconfig-python-0.9.5.92-1.fc16, compiz-plugins-main-0.9.5.92-1.fc16, libcompizconfig-0.9.5.92-1.fc16, compiz-0.9.5.92.1-0.1.gite676f1b12eb8db3a76978eed5bfc7c2cf9a0b6ce.fc16, compiz-fusion-unsupported-0.9.4-6.fc16 has been submitted as an update for Fedora 16.
https://admin.fedoraproject.org/updates/compiz-fusion-unsupported-0.9.4-6.fc16,compiz-fusion-extras-0.9.5.92-1.fc16,compizconfig-backend-gconf-0.9.5.92-0.1.gitf9ac54186bb62d00b28adc335220dba39a04b702.fc16,ccsm-0.9.5.92-1.fc16,compizconfig-python-0.9.5.92-1.fc16,compiz-plugins-main-0.9.5.92-1.fc16,libcompizconfig-0.9.5.92-1.fc16,compiz-0.9.5.92.1-0.1.gite676f1b12eb8db3a76978eed5bfc7c2cf9a0b6ce.fc16

Comment 2 Fedora Update System 2011-10-19 04:14:34 UTC
Package compiz-fusion-extras-0.9.5.92-1.fc16, compizconfig-backend-gconf-0.9.5.92-0.1.gitf9ac54186bb62d00b28adc335220dba39a04b702.fc16, ccsm-0.9.5.92-1.fc16, compizconfig-python-0.9.5.92-1.fc16, compiz-plugins-main-0.9.5.92-1.fc16, libcompizconfig-0.9.5.92-1.fc16, compiz-0.9.5.92.1-0.1.gite676f1b12eb8db3a76978eed5bfc7c2cf9a0b6ce.fc16, compiz-fusion-unsupported-0.9.4-6.fc16:
* should fix your issue,
* was pushed to the Fedora 16 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing compiz-fusion-extras-0.9.5.92-1.fc16 compizconfig-backend-gconf-0.9.5.92-0.1.gitf9ac54186bb62d00b28adc335220dba39a04b702.fc16 ccsm-0.9.5.92-1.fc16 compizconfig-python-0.9.5.92-1.fc16 compiz-plugins-main-0.9.5.92-1.fc16 libcompizconfig-0.9.5.92-1.fc16 compiz-0.9.5.92.1-0.1.gite676f1b12eb8db3a76978eed5bfc7c2cf9a0b6ce.fc16 compiz-fusion-unsupported-0.9.4-6.fc16'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2011-14594
then log in and leave karma (feedback).

Comment 3 Laine Stump 2011-10-19 20:25:28 UTC
Unfortunately this update hasn't changed the behavior. I did a full system update, which pulled in the above version of compiz, then rebooted just to make sure there wasn't some daemon that needed restarting. When I rebooted, I still could not run any application that required policykit authentication (unless I logged in with a standard gnome session or xfce session)

(I momentarily thought this update had worked, but it was only due to being inadvertantly logged in with a standard gnome-in-fallback-mode session. This happened because the login screen no longer remembers what type of session I selected the previous time - it always switches it back to gnome, meaning that I have to re-select the session type each time I login. I'm not sure what has prompted this behavior; it's not the way it was working a few days ago).

Comment 4 Fedora Update System 2011-11-10 17:36:06 UTC
compiz-fusion-extras-0.9.5.92-1.fc16, compizconfig-backend-gconf-0.9.5.92-0.1.gitf9ac54186bb62d00b28adc335220dba39a04b702.fc16, ccsm-0.9.5.92-1.fc16, compizconfig-python-0.9.5.92-1.fc16, compiz-plugins-main-0.9.5.92-1.fc16, libcompizconfig-0.9.5.92-1.fc16, compiz-0.9.5.92.1-0.1.gite676f1b12eb8db3a76978eed5bfc7c2cf9a0b6ce.fc16, compiz-fusion-unsupported-0.9.4-6.fc16 has been pushed to the Fedora 16 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 5 leigh scott 2011-11-10 17:58:12 UTC
I'm have been unable to reproduce the bug here.

Comment 6 Eric Blake 2011-11-14 16:30:55 UTC
I just reproduced the problem on my system:

compiz-0.9.5.92.1-0.1.gite676f1b12eb8db3a76978eed5bfc7c2cf9a0b6ce.fc16.x86_64

Comment 7 Eric Blake 2011-11-14 16:44:49 UTC
(In reply to comment #6)
> I just reproduced the problem on my system:
> 
> compiz-0.9.5.92.1-0.1.gite676f1b12eb8db3a76978eed5bfc7c2cf9a0b6ce.fc16.x86_64

and running 'yum erase -y compiz' and rebooting back into gnome fallback mode fixed the problem for me, so this is still definitely broken.  I'm reopening the bug.

Comment 8 Laine Stump 2011-11-14 16:59:28 UTC
Leigh: are you saying that you install compiz-gnome, login using the "Classic
GNOME with Compiz" session type, and are able to run virt-manager, and the
firewall config application with no problems?

If so, we need to figure out what's different between your system and ours.
There are now three people exhibiting this problem that I know of:

1) On my system, the problem still occurs with the latest compiz update, but
only when I login using the Classic GNOME with Compiz" session type.

2) on eblake and dpierce's systems, even logging in using the standard Gnome
"fallback mode" session results in failure to authenticate when running
virt-manager, the firewall config app, etc. In both cases, when they run "yum
erase compiz*, the authentication starts working again. I believe in both cases
also, these systems were upgraded from F15 or F14 (mine was a clean install).

Just fyi, here is the list of packages on my system that have "compiz" in the
name:

compiz-plugins-main-0.9.5.92-1.fc16.x86_64
libcompizconfig-0.9.5.92-1.fc16.x86_64
compiz-0.9.5.92.1-0.1.gite676f1b12eb8db3a76978eed5bfc7c2cf9a0b6ce.fc16.x86_64
compiz-gnome-0.9.5.92.1-0.1.gite676f1b12eb8db3a76978eed5bfc7c2cf9a0b6ce.fc16.x86_64
compiz-gtk-0.9.5.92.1-0.1.gite676f1b12eb8db3a76978eed5bfc7c2cf9a0b6ce.fc16.x86_64

Comment 9 leigh scott 2011-11-14 20:42:13 UTC
Created attachment 533615 [details]
polkit-gnome_classic-authentication-agent-1.desktop

Please add this file to /etc/xdg/autostart then test again

I believe this is the change that broke thing for compiz.

http://koji.fedoraproject.org/koji/buildinfo?buildID=229975

Comment 10 leigh scott 2011-11-14 21:06:40 UTC
Created attachment 533627 [details]
compiz-authentication-agent.desktop

I think it would be better to use this desktop file in /usr/share/gnome/autostart
Any thoughts on this?

Comment 11 Laine Stump 2011-11-24 05:47:07 UTC
I just tried adding the file in attachment 533627 [details] to /usr/share/gnome/autostart, and this fixes the problem for me when logging in with a "Gnome Classic with compiz" session.

eblake and dpierce - does the presence of that file fix things for you too?

Comment 12 D Johnson 2011-11-26 22:53:37 UTC
I can confirm that adding the file above to the /usr/share/gnome/autostart resolves the issue.

Comment 13 Laine Stump 2012-01-24 15:29:16 UTC
Leigh - I've verified the fix from comment 10 on two different systems. Any chance of getting it into an update so I don't have to do it by hand for each install?

Also, I notice the assignee is "Orphan Owner" - is the plan to remove this package in F17? So far compiz-gnome's "classic gnome" session is the least painful way I've found of dealing with Gnome Desktop, so I would be willing to put some effort into seeing it stick around, but if it's a complete dead end, I may as well wean myself from it sooner rather than later :-/

Comment 14 leigh scott 2012-01-24 16:33:46 UTC
(In reply to comment #13)
> Leigh - I've verified the fix from comment 10 on two different systems. Any
> chance of getting it into an update so I don't have to do it by hand for each
> install?
> 

I will try to find the time to do it by the weekend.



> Also, I notice the assignee is "Orphan Owner" - is the plan to remove this
> package in F17? So far compiz-gnome's "classic gnome" session is the least
> painful way I've found of dealing with Gnome Desktop,

Have you tried cinnamon?, I've submitted review requests.
There is a testing repo @ fedorapeople.org 

http://forums.fedoraforum.org/showthread.php?t=274611

It looks promising.

> so I would be willing to
> put some effort into seeing it stick around, but if it's a complete dead end, >I may as well wean myself from it sooner rather than later :-/


Compiz development isn't keep up with the changes in gnome or kde so maintaining it would be difficult.

Comment 15 leigh scott 2012-01-24 16:52:09 UTC
Here's a link to the review

https://bugzilla.redhat.com/show_bug.cgi?id=771252

Comment 16 leigh scott 2012-02-01 12:18:40 UTC
(In reply to comment #13)
> Leigh - I've verified the fix from comment 10 on two different systems. Any
> chance of getting it into an update so I don't have to do it by hand for each
> install?
> 
> Also, I notice the assignee is "Orphan Owner" - is the plan to remove this
> package in F17? So far compiz-gnome's "classic gnome" session is the least
> painful way I've found of dealing with Gnome Desktop, so I would be willing to
> put some effort into seeing it stick around, but if it's a complete dead end, I
> may as well wean myself from it sooner rather than later :-/

Do you know if this bug affects F15 as well?

Comment 17 Fedora Update System 2012-02-01 12:30:02 UTC
compiz-0.9.5.92.1-0.2.gite676f1b12eb8db3a76978eed5bfc7c2cf9a0b6ce.fc16 has been submitted as an update for Fedora 16.
https://admin.fedoraproject.org/updates/compiz-0.9.5.92.1-0.2.gite676f1b12eb8db3a76978eed5bfc7c2cf9a0b6ce.fc16

Comment 18 Fedora Update System 2012-02-01 19:24:17 UTC
Package compiz-0.9.5.92.1-0.2.gite676f1b12eb8db3a76978eed5bfc7c2cf9a0b6ce.fc16:
* should fix your issue,
* was pushed to the Fedora 16 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing compiz-0.9.5.92.1-0.2.gite676f1b12eb8db3a76978eed5bfc7c2cf9a0b6ce.fc16'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2012-1120/compiz-0.9.5.92.1-0.2.gite676f1b12eb8db3a76978eed5bfc7c2cf9a0b6ce.fc16
then log in and leave karma (feedback).

Comment 19 Laine Stump 2012-02-01 20:22:55 UTC
The updated package fixes the problem for me (and I left karma :-).

I did notice that the new file added to /usr/share/gnome/autostart has execute permissions turned on, although the other files in that directory don't (and I determined by experimenting that it isn't necessary)

Sorry, I don't know if this is an issue on F15, as I skipped from F14 directly to F16 on all my systems.

Comment 20 leigh scott 2012-02-01 20:56:13 UTC
(In reply to comment #19)
> The updated package fixes the problem for me (and I left karma :-).
> 
> I did notice that the new file added to /usr/share/gnome/autostart has execute
> permissions turned on, although the other files in that directory don't (and I
> determined by experimenting that it isn't necessary)
> 
> Sorry, I don't know if this is an issue on F15, as I skipped from F14 directly
> to F16 on all my systems.



It seems that the whole package has a permissions issues, I will fix it.

[leigh@main_pc Desktop]$ rpmlint  '/home/leigh/Desktop/compiz-gnome-0.9.5.92.1-0.2.gite676f1b12eb8db3a76978eed5bfc7c2cf9a0b6ce.fc16.i686.rpm' 
compiz-gnome.i686: W: no-documentation
compiz-gnome.i686: E: script-without-shebang /usr/share/gnome-session/sessions/compiz-gnome.session
compiz-gnome.i686: E: script-without-shebang /usr/share/gnome/autostart/compiz-authentication-agent.desktop
compiz-gnome.i686: E: script-without-shebang /usr/share/xsessions/compiz-gnome.desktop
1 packages and 0 specfiles checked; 3 errors, 1 warnings.
[leigh@main_pc Desktop]$

Comment 21 Fedora Update System 2012-02-02 17:31:33 UTC
compiz-0.9.5.92.1-0.2.gite676f1b12eb8db3a76978eed5bfc7c2cf9a0b6ce.fc16 has been pushed to the Fedora 16 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 22 Stuart D Gathman 2012-02-04 02:43:10 UTC
(In reply to comment #14)

> > so I would be willing to
> > put some effort into seeing it stick around, but if it's a complete dead end, >I may as well wean myself from it sooner rather than later :-/
> 
> 
> Compiz development isn't keep up with the changes in gnome or kde so
> maintaining it would be difficult.

gnome-shell doesn't work on my hardware.  compiz used to work perfectly in F14, but crashes too much to be usable on F16.


Note You need to log in before you can comment on or make changes to this bug.