| Summary: | PolicyKit1-KDE" appears suddenly requires root access | ||
|---|---|---|---|
| Product: | [ROSA-based products] ROSA Fresh | Reporter: | daz <darrencleaver> |
| Component: | Localization | Assignee: | JDronova <juliette.tux> |
| Status: | RESOLVED FIXED | QA Contact: | ROSA Linux Bugs <bugs> |
| Severity: | normal | ||
| Priority: | Normal | CC: | darrencleaver, eugene.shatokhin, juliette.tux, k.kalmykov |
| Version: | Fresh | ||
| Target Milestone: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Platform: | --- | ROSA Vulnerability identifier: | |
| RPM Package: | ISO-related: | ||
| Bad POT generating: | Upstream: | ||
| Attachments: |
PolicyKit1-KDE image that requires root access
System Activity Processes edit /etc/sysctl.d has no files in there konsole scan file not found New Log IDS limit is 65536 however issue still present Bug at login still |
||
|
Description
daz
2016-12-21 02:28:37 MSK
Correction: How reproducible: I do not know how to reproduce. I cannot identify any program startup that triggers this error message. Steps to Reproduce: 1.n/a 2.n/a 3.n/a (In reply to comment #1) > Correction: > > How reproducible: > I do not know how to reproduce. I cannot identify any program startup that > triggers this error message. > > Steps to Reproduce: > 1.n/a > 2.n/a > 3.n/a I found this Bug Bug 4791 . However I was unclear what the final solution that was put in place ??? Created attachment 4571 [details] System Activity Processes I logged off system logged back on . Run program Opera Beta Browser https://www.opera.com/computer/beta and got the Policy-Kit message again. There seems to be no way to tell where or why this is happening from what I can see. I get this message several times a day when I have made no system changes. Please help resolve Yes, we saw such things before. This is actually not a problem in the kernel per-se and can be dealt with in user space. There is a limit on how many files/directories can be watched for changes at the same time. The applications like Baloo and other file searchers and indexers like to monitor the file system for changes. If the limit is hit, that PolicyKit1-KDE window appears and asks the permission to increase it, although it is *really* far from obvious, I admit. What I did in the kernel back then (bug 4791) was to increase the default limit from 8192 to 32768. A quick and dirty workaround that was OK at that point. A better solution would be to do it in user space. Could you please try the following: edit /etc/sysctl.d/97-kde-baloo-filewatch-inotify.conf and replace the number there (32768 by default) with a higher one, say 65536. Then reboot the system. Let us see if that helps. Created attachment 4573 [details]
edit /etc/sysctl.d has no files in there
Could you please try the following: edit /etc/sysctl.d/97-kde-baloo-filewatch-inotify.conf and replace the number there (32768 by default) with a higher one, say 65536. Then reboot the system.
Please see attached video. Am I missing something ??
Created attachment 4574 [details]
konsole scan file not found
sysctl.d/97-kde-baloo-filewatch-inotify.conf
See Konsole scan results
Just on a side note. All the ROSA forum groups I see are all in Russian. I am from Australia and don't know Russian. No one I know uses ROSA. My question is simple where do I submit a request for a software package. I am not sure how submissions work but If this can be sent to submissions team http://kodi.wiki/view/HOW-TO:Install_Kodi_for_Linux that would be great. As i dont know how to install on ROSA Thanks Back on topic now Created attachment 4575 [details]
New Log IDS
Ok,
So Ive worked out that this message will come up every time I log out and log back in
(In reply to comment #7) Ah, so it is missing. It might be an issue in balloo package. You can create it manually then. Just create /etc/sysctl.d/97-kde-baloo-filewatch-inotify.conf with the following contents: fs.inotify.max_user_watches = 65536 As for the package or update requests, the recommended way is to open a bug here with "[PACKAGE REQUEST]" in the subject to make it easier to find. We do have the forums for English-speaking users (http://forum.rosalab.ru/viewforum.php?f=21&sid=90163f108cd495c13455e68ccf8fd651) but you are right, most of the activity currently happens in our Russian and Polish forums. It is better to submit the package requests to the Bugzilla anyway. (In reply to comment #10) > (In reply to comment #7) > Ah, so it is missing. It might be an issue in balloo package. > > You can create it manually then. Just create > /etc/sysctl.d/97-kde-baloo-filewatch-inotify.conf with the following > contents: > fs.inotify.max_user_watches = 65536 > > > As for the package or update requests, the recommended way is to open a bug > here with "[PACKAGE REQUEST]" in the subject to make it easier to find. > > We do have the forums for English-speaking users > (http://forum.rosalab.ru/viewforum. > php?f=21&sid=90163f108cd495c13455e68ccf8fd651) but you are right, most of > the activity currently happens in our Russian and Polish forums. It is > better to submit the package requests to the Bugzilla anyway. Hi , Can you please explain how I " Just create /etc/sysctl.d/97-kde-baloo-filewatch-inotify.conf with the following contents: fs.inotify.max_user_watches = 65536 " ? (In reply to comment #11) > Can you please explain how I " Just create > /etc/sysctl.d/97-kde-baloo-filewatch-inotify.conf with the following > contents: > fs.inotify.max_user_watches = 65536 " ? Create a file 97-kde-baloo-filewatch-inotify.conf somewhere, write "fs.inotify.max_user_watches = 65536" (without quotes) in that file. Then, as root, move it to /etc/sysctl.d/ sudo mv 97-kde-baloo-filewatch-inotify.conf /etc/sysctl.d/ After the file is in place, it is needed to reboot the system. BTW, you can check what the actual limit is after reboot with cat /proc/sys/fs/inotify/max_user_watches (In reply to comment #11) > (In reply to comment #10) > > (In reply to comment #7) > > Ah, so it is missing. It might be an issue in balloo package. > > > > You can create it manually then. Just create > > /etc/sysctl.d/97-kde-baloo-filewatch-inotify.conf with the following > > contents: > > fs.inotify.max_user_watches = 65536 > > > > > > As for the package or update requests, the recommended way is to open a bug > > here with "[PACKAGE REQUEST]" in the subject to make it easier to find. > > > > We do have the forums for English-speaking users > > (http://forum.rosalab.ru/viewforum. > > php?f=21&sid=90163f108cd495c13455e68ccf8fd651) but you are right, most of > > the activity currently happens in our Russian and Polish forums. It is > > better to submit the package requests to the Bugzilla anyway. > > Hi , > > Can you please explain how I " Just create > /etc/sysctl.d/97-kde-baloo-filewatch-inotify.conf with the following > contents: > fs.inotify.max_user_watches = 65536 " ? Hey. I have one problem joining that support forum. I don't understand the CONFIRMATION OF REGISTRATION question Are you really ROSA User? Please, enter result of «cat /etc/rosa-release | head -c4 | sha1sum | head -c4»: This question is a means of preventing automated form submissions by spambots ??????? Ill also join this one, however not sure if many will speak English I dont see any English posts and translation for these such things prob not the best (In reply to comment #14) > Ill also join this one, however not sure if many will speak English I dont > see any English posts and translation for these such things prob not the best http://forum.rosalab.ru/en/ (In reply to comment #13) > Hey. I have one problem joining that support forum. I don't understand the > CONFIRMATION OF REGISTRATION question Are you really ROSA User? Please, > enter result of «cat /etc/rosa-release | head -c4 | sha1sum | head -c4»: > This question is a means of preventing automated form submissions by > spambots ??????? Yep ;-) > Ill also join this one, however not sure if many will speak English I dont > see any English posts and translation for these such things prob not the best I suppose, it is OK to write in English there too. Most of our key developers and maintainers can speak English, so they will understand you. (In reply to comment #16) > (In reply to comment #13) > > Hey. I have one problem joining that support forum. I don't understand the > > CONFIRMATION OF REGISTRATION question Are you really ROSA User? Please, > > enter result of «cat /etc/rosa-release | head -c4 | sha1sum | head -c4»: > > This question is a means of preventing automated form submissions by > > spambots ??????? > Yep ;-) > > > Ill also join this one, however not sure if many will speak English I dont > > see any English posts and translation for these such things prob not the best > I suppose, it is OK to write in English there too. Most of our key > developers and maintainers can speak English, so they will understand you. Lol nice answer Egene. How do I find out the result of «cat /etc/rosa-release | head -c4 | sha1sum | head -c4»: Give me a break Eugene I am still trying to work out your previous answers. Is the result of cat /etc/rosa-release | head -c4 | sha1sum | head -c4»: found running a command in terminal or what ?? Ahhhhh Do I just run cat /etc/rosa-release | head -c4 | sha1sum | head -c4 in Konsole and I get provided with a 4 digit number? I worked it out !!!!!! :) Hi Eugene I tried to work this out but my skills are limited. Eugene: Create a file 97-kde-baloo-filewatch-inotify.conf somewhere, write "fs.inotify.max_user_watches = 65536" (without quotes) in that file. Then, as root, move it to /etc/sysctl.d/ sudo mv 97-kde-baloo-filewatch-inotify.conf /etc/sysctl.d/ Daz: How do I create the above ? Eugene: You can create it manually then. Just create > /etc/sysctl.d/97-kde-baloo-filewatch-inotify.conf with the following > contents: > fs.inotify.max_user_watches = 65536 Daz: How do I create /etc/sysctl.d/97-kde-baloo-filewatch-inotify.conf with the following > contents: > fs.inotify.max_user_watches = 65536 Eugene: Create a file 97-kde-baloo-filewatch-inotify.conf somewhere, write "fs.inotify.max_user_watches = 65536" (without quotes) in that file. Then, as root, move it to /etc/sysctl.d/ sudo mv 97-kde-baloo-filewatch-inotify.conf /etc/sysctl.d/ Daz: 1. How to create a file 97- Kde-baloo-filewatch-inotify.conf 2. You state create this file somewhere ? 3. Then as root move it to /etc/sysctl.d/ 4. Can I assume that this Konsole command sudo mv 97-kde-baloo-filewatch-inotify.conf /etc/sysctl.d/ moves file 97-kde-baloo-filewatch-inotify.conf into /etc/sysctl.d/ 5. System reboot , problem maybe solved ? Thanks Hi Eugene, Could you please just clarify the points in my last post so I can put this issue to rest. Just some simple instructions and hopefully this case can be closed. Thanks (In reply to comment #20) > Daz: 1. How to create a file 97- > Kde-baloo-filewatch-inotify.conf > 2. You state create this file somewhere ? Yes, open a text editor, say, kwrite, create a new file, write "fs.inotify.max_user_watches = 65536" there, save as 97-kde-baloo-filewatch-inotify.conf in a directory of your choice. > 3. Then as root move it to /etc/sysctl.d/ > 4. Can I assume that this Konsole command sudo mv > 97-kde-baloo-filewatch-inotify.conf /etc/sysctl.d/ moves file > 97-kde-baloo-filewatch-inotify.conf into /etc/sysctl.d/ Yes, exactly. > 5. System reboot , problem maybe solved ? Perhaps. After reboot, please open the console again and run the following command: cat /proc/sys/fs/inotify/max_user_watches This is just to check the current limit on watched files and directories. If it is not 65536, then we might be missing something. If that limit is also not enough, it can be increased later, we'll see. Created attachment 4576 [details]
limit is 65536 however issue still present
Hi,
As you will see just good timing just as I run the command to show 65536 the policy box popped up again ????
(In reply to comment #23) > Created attachment 4576 [details] > limit is 65536 however issue still present > > Hi, > > As you will see just good timing just as I run the command to show 65536 the > policy box popped up again ???? How will we know what limit above 65536 is needed. I seen on a past issue from someone you ended up having to do a kernel patch . I have to do some video screen recordings as part of my work. It crucial I cant keep having this policy request box popping up on my screen at random ... Please advise as soon as possible (In reply to comment #23) > Created attachment 4576 [details] > limit is 65536 however issue still present > > Hi, > > As you will see just good timing just as I run the command to show 65536 the > policy box popped up again ???? Might be a coincidence. You can try to increase this limit in /etc/sysctl.d/97-kde-baloo-filewatch-inotify.conf and then reboot again. Or, if you do not use KDE's file searching/indexing capabilities, you can disable them. Launch "System Settings", look for the item related to search / find / smth like that, I do not remember its name exactly. Launch that item, see if the indexing is enabled (a checkbox is checked). Uncheck it. If it does not help, take a look at https://community.kde.org/Baloo/Configuration. There are instructions there how to disable Baloo. The file ~/.kde4/share/apps/config/baloofilerc might be absent in your system - you can create it. Created attachment 4577 [details]
Bug at login still
Please see new polkit-pids
And please leave the importance of this bug as normal. This is not a security hole, neither it is a crash. This is just a non-obvious, confusing but harmless thing in the system. (In reply to comment #27) > And please leave the importance of this bug as normal. This is not a > security hole, neither it is a crash. > > This is just a non-obvious, confusing but harmless thing in the system. Not a problem re: as normal noted for next time. Update: I think this issue has now been resolved. I increased size and run sudo echo 'fs.inotify.max_user_watches = 131072' > /etc/sysctl.d/97-inotify.conf Reboot: Now I can not replicate the issue by logging off and on again which created the policy pop-up to appear each time. This is no longer happening. Thanks for the support. I hope this has fixed it !!!!!!! Good. Closing. |