← Back to team overview

debcrafters-packages team mailing list archive

[Bug 1871593] Re: User receives prompt on login: "Authentication is required to create a color managed device"

 

Workaround:

After further investigation, I found that in my case the popup was triggered by xiccd, which was automatically launched during session startup (XFCE in my case).
xiccd attempts to interact with the system color management daemon (colord), which in turn requests elevated privileges through Polkit — resulting in the authentication popup.

To fix this cleanly, I added the following JavaScript-based Polkit rule,
which works on modern systems using /etc/polkit-1/rules.d/:

/etc/polkit-1/rules.d/20-disable-colord.rules

polkit.addRule(function(action, subject) {
    if (action.id.startsWith("org.freedesktop.color-manager.")) {
        return polkit.Result.NO;
    }
});

This workaround finally made the startup clean again — no more mystery
prompts asking for root without context. This workaround does not solve
the root problem, this rule blocks all actions coming from colord or
anything trying to use color profile management (including xiccd).

-- 
You received this bug notification because you are a member of
Debcrafters packages, which is subscribed to colord in Ubuntu.
https://bugs.launchpad.net/bugs/1871593

Title:
  User receives prompt on login: "Authentication is required to create a
  color managed device"

Status in colord package in Ubuntu:
  Confirmed

Bug description:
  This concerns colord 1.4.4-2 in Ubuntu focal. (xiccd 0.3.0-1 may also
  be relevant.)

  I log into the Xfce desktop environment, and immediately see an
  "Authenticate" window pop up:

      Authentication is required to create a color managed device

      Password for root: ________

      Action: org.freedesktop.color-manager.create-device
      Vendor: System Color Manager

  I see this in syslog:

      Apr  8 05:38:30 test-ubuntu64 dbus-daemon[573]: [system]
  Activating via systemd: service name='org.freedesktop.ColorManager'
  unit='colord.service' requested by ':1.35' (uid=1000 pid=1475
  comm="xiccd " label="unconfined")

  This prompt is confusing to ordinary users, and I do not understand
  why it should even be necessary.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/colord/+bug/1871593/+subscriptions