[Bug 1965439] Re: applications can no longer launch when called by kdesu

Fri Jul 8 11:16:22 UTC 2022

** Description changed:

- See description below. As the driver manager is done inside software-
- properties-qt, it's basically the same bug, but now it's affected by
- something we can't exactly get into the mechanism of: plasma-discover's
- "Software Sources" link.
+ kdesu fails to authenticate with sudo from Jammy.

- Steps to recrate:
+ See upstream bug: KDE bug: https://bugs.kde.org/show_bug.cgi?id=452532

- 1) Open Plasma-discover
- 2) Go to Settings
- 3) Under click on "Software Sources"
- 4) Attempt to enter password
+ Examples: Kubuntu driver manager, launching ksystemlog from the main
+ menu, or trying to run krusader root mode option via its 'Tools > Start
+ Krusader Root Mode' menu entry. Assuming that the current user is a
+ member of the sudo group.

- Expected: Software properties opens
+ On entering the correct password authentication is refused, stating that 
+ possibly an incorrect password has been entered.

- Actual: Pkexec keeps asking for password.
+ It appears that kdesu fails to cope with the sudo config change in this 
+ commit:

- ------
+ https://salsa.debian.org/sudo-
+ team/sudo/-/commit/59db341d46aa4c26b54c1270e69f2562e7f3d751

- Earlier description:
+ kdesu was fixed in Debian with:

- The driver manager for both Ubuntu Studio and Kubuntu can no longer
- launch due to some updated security measures in PolicyKit.
+ https://tracker.debian.org/news/1330116/accepted-kdesu-5940-2-source-
+ into-unstable/

- The original behavior was that systemsettings would open
- /usr/bin/ubuntustudio-driver-manager (or /usr/bin/kubuntu-driver-manger)
- via pkexec, which would then open software-settings-qt. Unfortunately,
- the new behavior does not act correctly to pkexec and pkexec does not
- see the user as available in the sudoers file.
+ The issue can be worked around by adding /etc/sudoers.d/kdesu-sudoers
+ with the contents

- The only way around this was to pass "export DISPLAY=:0" inside the
- appropriate driver manager executable with the command "sudo software-
- properties-qt". The KCM itself needs to execute the driver-manager via
- xterm, which then prompts for a password. It's ugly, but it works.
- 
- I will attach a debdiff for the kubuntu-settings package.
+ Defaults!/usr/lib/*/libexec/kf5/kdesu_stub !use_pty

  ProblemType: Bug
  DistroRelease: Ubuntu 22.04
  Package: ubuntustudio-default-settings 22.04.19 [modified: usr/share/sddm/themes/ubuntustudio/theme.conf]
  ProcVersionSignature: Ubuntu 5.15.0-22.22-lowlatency 5.15.19
  Uname: Linux 5.15.0-22-lowlatency x86_64
  NonfreeKernelModules: zfs zunicode zavl icp zcommon znvpair nvidia_modeset nvidia
  ApportVersion: 2.20.11-0ubuntu79
  Architecture: amd64
  CasperMD5CheckResult: unknown
  CurrentDesktop: KDE
  Date: Thu Mar 17 12:19:44 2022
  InstallationDate: Installed on 2021-03-20 (361 days ago)
  InstallationMedia: Ubuntu-Studio 21.04 "Hirsute Hippo" - Alpha amd64 (20210320)
  PackageArchitecture: all
  SourcePackage: ubuntustudio-default-settings
  UpgradeStatus: Upgraded to jammy on 2021-11-07 (130 days ago)
  modified.conffile..etc.skel..local.share.konsole.Profile: [deleted]

** Summary changed:

- applications can no longer launch when called by kdesu
+ kdesu fails to authenticate with sudo from Jammy.

** Description changed:

  kdesu fails to authenticate with sudo from Jammy.

  See upstream bug: KDE bug: https://bugs.kde.org/show_bug.cgi?id=452532

  Examples: Kubuntu driver manager, launching ksystemlog from the main
  menu, or trying to run krusader root mode option via its 'Tools > Start
  Krusader Root Mode' menu entry. Assuming that the current user is a
  member of the sudo group.

- On entering the correct password authentication is refused, stating that 
+ On entering the correct password authentication is refused, stating that
  possibly an incorrect password has been entered.

- It appears that kdesu fails to cope with the sudo config change in this 
+ It appears that kdesu fails to cope with the sudo config change in this
  commit:

  https://salsa.debian.org/sudo-
  team/sudo/-/commit/59db341d46aa4c26b54c1270e69f2562e7f3d751

  kdesu was fixed in Debian with:

  https://tracker.debian.org/news/1330116/accepted-kdesu-5940-2-source-
  into-unstable/
+ 
+ and fixed in kinetic with:
+ 
+ https://launchpad.net/ubuntu/+source/kdesu/5.94.0-0ubuntu2

  The issue can be worked around by adding /etc/sudoers.d/kdesu-sudoers
  with the contents

  Defaults!/usr/lib/*/libexec/kf5/kdesu_stub !use_pty

  ProblemType: Bug
  DistroRelease: Ubuntu 22.04
  Package: ubuntustudio-default-settings 22.04.19 [modified: usr/share/sddm/themes/ubuntustudio/theme.conf]
  ProcVersionSignature: Ubuntu 5.15.0-22.22-lowlatency 5.15.19
  Uname: Linux 5.15.0-22-lowlatency x86_64
  NonfreeKernelModules: zfs zunicode zavl icp zcommon znvpair nvidia_modeset nvidia
  ApportVersion: 2.20.11-0ubuntu79
  Architecture: amd64
  CasperMD5CheckResult: unknown
  CurrentDesktop: KDE
  Date: Thu Mar 17 12:19:44 2022
  InstallationDate: Installed on 2021-03-20 (361 days ago)
  InstallationMedia: Ubuntu-Studio 21.04 "Hirsute Hippo" - Alpha amd64 (20210320)
  PackageArchitecture: all
  SourcePackage: ubuntustudio-default-settings
  UpgradeStatus: Upgraded to jammy on 2021-11-07 (130 days ago)
  modified.conffile..etc.skel..local.share.konsole.Profile: [deleted]

-- 
You received this bug notification because you are a member of Ubuntu
Studio Development, which is subscribed to ubuntustudio-default-settings
in Ubuntu.
https://bugs.launchpad.net/bugs/1965439

Title:
  kdesu fails to authenticate with sudo from Jammy.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/kdesu/+bug/1965439/+subscriptions