View Issue Details

IDProjectCategoryView StatusLast Update
0017291CentOS-7polkitpublic2020-09-24 02:40
Reportergralex54 Assigned To 
PrioritynormalSeverityminorReproducibilityalways
Status newResolutionopen 
Summary0017291: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed since upgrade CentOS Linux release 7.8.2003
DescriptionHello,

Updated CentOS 7 server today and all of them are producing errors:

** (pkttyagent:26814): WARNING **: 03:54:40.789: Unable to register authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject
Error registering authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject (polkit-error-quark, 0)

When restarting services with systemctl.

# rpm -qa | grep polkit
polkit-0.112-26.el7.x86_64
polkit-pkla-compat-0.1-4.el7.x86_64

# mount | grep proc
proc on /proc type proc (rw,nosuid,nodev,noexec,relatime,hidepid=2)


I see a possible solution here: https://access.redhat.com/solutions/5005111 but have no access to it.

Kindly advice.

Regards,
Alex.
Steps To Reproduce# mount proc -o remount,hidepid=2
# systemctl restart polkit.service

and the error is reported

if to change

# mount proc -o remount,hidepid=0
# systemctl restart polkit.service

then no error is provided.
TagsNo tags attached.
abrt_hash
URL

Activities

TrevorH

TrevorH

2020-04-27 21:34

manager   ~0036779

You can read that article by registering for a free RH Developer subscription license. For more information on the free Red Hat Developer subscription please see http://developers.redhat.com/blog/2016/03/31/no-cost-rhel-developer-subscription-now-available/ with instructions for renewal on https://developers.redhat.com/articles/renew-your-red-hat-developer-program-subscription/
gralex54

gralex54

2020-04-28 03:47

reporter   ~0036783

Thanks.

From the page: The issue started to happen with polkit-0.112-18.el7 because of hardening made to fix security vulnerability CVE-2018-1116

In this case it is not a bug then.
deltatech

deltatech

2020-04-28 15:57

reporter   ~0036797

I have the same exact problem except that proc is NOT mounted with hidepid=2.

# mount | grep proc
proc on /proc type proc (rw,nosuid,nodev,noexec,relatime)

# rpm -qa | grep polkit
polkit-0.112-26.el7.x86_64
polkit-pkla-compat-0.1-4.el7.x86_64

systemctl restart anything gives the error yet completes the requested action anyway.

** (pkttyagent:29157): WARNING **: 08:56:17.722: Unable to register authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject
Error registering authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject (polkit-error-quark, 0)
Failed to restart dts-ulog.service: Unit not found.
gralex54

gralex54

2020-04-30 11:53

reporter   ~0036831

@deltatech,

Will it help if you re-mount /proc per guide https://access.redhat.com/solutions/5005111 ?
meatlayer

meatlayer

2020-05-01 21:22

reporter   ~0036850

Hi,
have the same problem with the latest update. Eg:

systemctl daemon-reload
** (pkttyagent:2946): WARNING **: 00:08:10.190: Unable to register authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject
Error registering authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject (polkit-error-quark, 0)

Helps disable the hiding of processes
mount proc -o remount,hidepid=0

However, this is not full correct solution, since in operating system needs to hide processes between users for the environment used.

-------------------------------
rpm -qa | grep polkit
polkit-0.112-26.el7.x86_64
polkit-pkla-compat-0.1-4.el7.x86_64

uname -a
Linux 3.10.0-1127.el7.x86_64 #1 SMP Tue Mar 31 23:36:51 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
TexasLinux

TexasLinux

2020-05-01 23:57

reporter   ~0036851

I'm having the same problem. I just did a "yum update" and now Samba doesn't work on my CentOS 7 machine -- due to this error (the text of the error brought me to this page via Google)

To follow what the last guy did:
rpm -qa | grep polkit
polkit-pkla-compat-0.1-4.el7.x86_64
polkit-0.112-26.el7.x86_64

uname -a
Linux srv2.matthewserver.com 5.4.0-1.el7.elrepo.x86_64 #1 SMP Mon Nov 25 09:18:09 EST 2019 x86_64 x86_64 x86_64 GNU/Linux
AL50

AL50

2020-05-05 14:34

reporter   ~0036872

Solution for me (for hidepid=2):

groupadd -g 23 nohidproc
usermod -a -G nohidproc polkitd
mount -o remount,rw,hidepid=2,gid=nohidproc /proc
systemctl restart polkit

modify /etc/fstab:
proc /proc proc defaults,hidepid=2,gid=nohidproc 0 0
anas.dev

anas.dev

2020-06-12 05:49

reporter   ~0037082

I was solved it by these steps:

https://opentechy.com/how-to-fix-gdbus-errororg-freedesktop-policykit1-error-failed/
bridgetsarah

bridgetsarah

2020-06-23 14:49

reporter   ~0037218

I've tried that link and i got the same issue. Does anyone know how to get this fixed?
kaibacef

kaibacef

2020-08-01 23:38

reporter   ~0037472

my problem was fixed.
all you need is to disable protection on secure Process (Hide all processes if not owned by the user ) from cwp, do your commend then enable it again
TrevorH

TrevorH

2020-08-02 01:56

manager   ~0037473

CWP has nothing at all to do with CentOS.
cexpert

cexpert

2020-09-24 02:40

reporter   ~0037732

TrevorH, It may have nothing to do with CWP but the messages stop showing up after systemctl restart postfix amavis when I did just that, disable security_UserProcess and re-enable right away.

Thanks for the tip kaibacef!

Issue History

Date Modified Username Field Change
2020-04-27 21:15 gralex54 New Issue
2020-04-27 21:34 TrevorH Note Added: 0036779
2020-04-28 03:47 gralex54 Note Added: 0036783
2020-04-28 15:57 deltatech Note Added: 0036797
2020-04-30 11:53 gralex54 Note Added: 0036831
2020-05-01 21:22 meatlayer Note Added: 0036850
2020-05-01 23:57 TexasLinux Note Added: 0036851
2020-05-05 14:34 AL50 Note Added: 0036872
2020-06-12 05:49 anas.dev Note Added: 0037082
2020-06-23 14:49 bridgetsarah Note Added: 0037218
2020-08-01 23:38 kaibacef Note Added: 0037472
2020-08-02 01:56 TrevorH Note Added: 0037473
2020-09-24 02:40 cexpert Note Added: 0037732