View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0017291 | CentOS-7 | polkit | public | 2020-04-27 21:15 | 2020-09-24 02:40 |
Reporter | gralex54 | Assigned To | |||
Priority | normal | Severity | minor | Reproducibility | always |
Status | new | Resolution | open | ||
Summary | 0017291: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed since upgrade CentOS Linux release 7.8.2003 | ||||
Description | Hello, Updated CentOS 7 server today and all of them are producing errors: ** (pkttyagent:26814): WARNING **: 03:54:40.789: Unable to register authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject Error registering authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject (polkit-error-quark, 0) When restarting services with systemctl. # rpm -qa | grep polkit polkit-0.112-26.el7.x86_64 polkit-pkla-compat-0.1-4.el7.x86_64 # mount | grep proc proc on /proc type proc (rw,nosuid,nodev,noexec,relatime,hidepid=2) I see a possible solution here: https://access.redhat.com/solutions/5005111 but have no access to it. Kindly advice. Regards, Alex. | ||||
Steps To Reproduce | # mount proc -o remount,hidepid=2 # systemctl restart polkit.service and the error is reported if to change # mount proc -o remount,hidepid=0 # systemctl restart polkit.service then no error is provided. | ||||
Tags | No tags attached. | ||||
abrt_hash | |||||
URL | |||||
You can read that article by registering for a free RH Developer subscription license. For more information on the free Red Hat Developer subscription please see http://developers.redhat.com/blog/2016/03/31/no-cost-rhel-developer-subscription-now-available/ with instructions for renewal on https://developers.redhat.com/articles/renew-your-red-hat-developer-program-subscription/ | |
Thanks. From the page: The issue started to happen with polkit-0.112-18.el7 because of hardening made to fix security vulnerability CVE-2018-1116 In this case it is not a bug then. |
|
I have the same exact problem except that proc is NOT mounted with hidepid=2. # mount | grep proc proc on /proc type proc (rw,nosuid,nodev,noexec,relatime) # rpm -qa | grep polkit polkit-0.112-26.el7.x86_64 polkit-pkla-compat-0.1-4.el7.x86_64 systemctl restart anything gives the error yet completes the requested action anyway. ** (pkttyagent:29157): WARNING **: 08:56:17.722: Unable to register authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject Error registering authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject (polkit-error-quark, 0) Failed to restart dts-ulog.service: Unit not found. |
|
@deltatech, Will it help if you re-mount /proc per guide https://access.redhat.com/solutions/5005111 ? |
|
Hi, have the same problem with the latest update. Eg: systemctl daemon-reload ** (pkttyagent:2946): WARNING **: 00:08:10.190: Unable to register authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject Error registering authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject (polkit-error-quark, 0) Helps disable the hiding of processes mount proc -o remount,hidepid=0 However, this is not full correct solution, since in operating system needs to hide processes between users for the environment used. ------------------------------- rpm -qa | grep polkit polkit-0.112-26.el7.x86_64 polkit-pkla-compat-0.1-4.el7.x86_64 uname -a Linux 3.10.0-1127.el7.x86_64 #1 SMP Tue Mar 31 23:36:51 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux |
|
I'm having the same problem. I just did a "yum update" and now Samba doesn't work on my CentOS 7 machine -- due to this error (the text of the error brought me to this page via Google) To follow what the last guy did: rpm -qa | grep polkit polkit-pkla-compat-0.1-4.el7.x86_64 polkit-0.112-26.el7.x86_64 uname -a Linux srv2.matthewserver.com 5.4.0-1.el7.elrepo.x86_64 #1 SMP Mon Nov 25 09:18:09 EST 2019 x86_64 x86_64 x86_64 GNU/Linux |
|
Solution for me (for hidepid=2): groupadd -g 23 nohidproc usermod -a -G nohidproc polkitd mount -o remount,rw,hidepid=2,gid=nohidproc /proc systemctl restart polkit modify /etc/fstab: proc /proc proc defaults,hidepid=2,gid=nohidproc 0 0 |
|
I was solved it by these steps: https://opentechy.com/how-to-fix-gdbus-errororg-freedesktop-policykit1-error-failed/ |
|
I've tried that link and i got the same issue. Does anyone know how to get this fixed? | |
my problem was fixed. all you need is to disable protection on secure Process (Hide all processes if not owned by the user ) from cwp, do your commend then enable it again |
|
CWP has nothing at all to do with CentOS. | |
TrevorH, It may have nothing to do with CWP but the messages stop showing up after systemctl restart postfix amavis when I did just that, disable security_UserProcess and re-enable right away. Thanks for the tip kaibacef! |
|
Date Modified | Username | Field | Change |
---|---|---|---|
2020-04-27 21:15 | gralex54 | New Issue | |
2020-04-27 21:34 | TrevorH | Note Added: 0036779 | |
2020-04-28 03:47 | gralex54 | Note Added: 0036783 | |
2020-04-28 15:57 | deltatech | Note Added: 0036797 | |
2020-04-30 11:53 | gralex54 | Note Added: 0036831 | |
2020-05-01 21:22 | meatlayer | Note Added: 0036850 | |
2020-05-01 23:57 | TexasLinux | Note Added: 0036851 | |
2020-05-05 14:34 | AL50 | Note Added: 0036872 | |
2020-06-12 05:49 | anas.dev | Note Added: 0037082 | |
2020-06-23 14:49 | bridgetsarah | Note Added: 0037218 | |
2020-08-01 23:38 | kaibacef | Note Added: 0037472 | |
2020-08-02 01:56 | TrevorH | Note Added: 0037473 | |
2020-09-24 02:40 | cexpert | Note Added: 0037732 |