desktop-packages team mailing list archive

[Colin Law <1474182@xxxxxxxxxxxxxxxxxx>]

I am also seeing this (on 15.04), it started happening a few weeks ago.
As suggested above it is associated with oneconf.  Immediately before
the popup appears (or as it appears) data in
.cache/oneconf/..../package_list_... and host are updated and after a
valid pwd is entered last_sync is updated.  In auth.log the following is
seen after entering the pwd

Aug 31 07:54:40 tigger gcr-prompter[4444]: Gcr: completed password prompt for callback :1.96@/org/gnome/keyring/Prompt/p1
Aug 31 07:54:40 tigger gcr-prompter[4444]: Gcr: encrypting data
Aug 31 07:54:40 tigger gcr-prompter[4444]: Gcr: sending the secret exchange: [sx-aes-1]\npublic=[snipped]
Aug 31 07:54:40 tigger gcr-prompter[4444]: Gcr: calling the PromptReady method on /org/gnome/keyring/Prompt/p1@:1.96
Aug 31 07:54:40 tigger gcr-prompter[4444]: Gcr: returned from the PromptReady method on /org/gnome/keyring/Prompt/p1@:1.96
Aug 31 07:54:40 tigger gcr-prompter[4444]: Gcr: received PerformPrompt call from callback /org/gnome/keyring/Prompt/p1@:1.96
Aug 31 07:54:40 tigger gcr-prompter[4444]: Gcr: stopping prompting for operation /org/gnome/keyring/Prompt/p1@:1.96
Aug 31 07:54:40 tigger gcr-prompter[4444]: Gcr: closing the prompt
Aug 31 07:54:40 tigger gcr-prompter[4444]: Gcr: stopping prompting for operation /org/gnome/keyring/Prompt/p1@:1.96
Aug 31 07:54:40 tigger gcr-prompter[4444]: Gcr: couldn't find the callback for prompting operation /org/gnome/keyring/Prompt/p1@:1.96
Aug 31 07:54:40 tigger gcr-prompter[4444]: Gcr: stopping prompting for operation /org/gnome/keyring/Prompt/p1@:1.96
Aug 31 07:54:40 tigger gcr-prompter[4444]: Gcr: couldn't find the callback for prompting operation /org/gnome/keyring/Prompt/p1@:1.96
Aug 31 07:54:40 tigger gcr-prompter[4444]: Gcr: stopping prompting for operation /org/gnome/keyring/Prompt/p1@:1.96
Aug 31 07:54:40 tigger gcr-prompter[4444]: Gcr: couldn't find the callback for prompting operation /org/gnome/keyring/Prompt/p1@:1.96
Aug 31 07:54:40 tigger gcr-prompter[4444]: Gcr: calling the PromptDone on /org/gnome/keyring/Prompt/p1@:1.96, and ignoring reply
Aug 31 07:54:50 tigger gcr-prompter[4444]: 10 second inactivity timeout, quitting
Aug 31 07:54:50 tigger gcr-prompter[4444]: Gcr: unregistering prompter
Aug 31 07:54:50 tigger gcr-prompter[4444]: Gcr: disposing prompter
Aug 31 07:54:50 tigger gcr-prompter[4444]: Gcr: finalizing prompter

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-session in Ubuntu.
https://bugs.launchpad.net/bugs/1474182

Title:
  Mystery keyring password prompts pop up for no reason

Status in gnome-session package in Ubuntu:
  Confirmed

Bug description:
  A prompt box periodically pops up for no apparent reason asking me for
  my default keyring password.    If I click Cancel, it re-appears again
  after a few minutes.  There is absolutely no information about what
  program is asking or why.   Is this a phishing scam?!?

  I'm marking this as "security vulnerability" because the "mystery"
  prompt is asking for extremely sensitive information which users
  should not give out without knowing what program will use it.

  * My homedir is not encrypted
  * I do use automatic login, but it succeeded and everything works, including network.
  * My system has slept/resumed a few times (don't know if that's relevant)
  * I use a wired Ethernet connection, not WiFi (so no password is needed for network access).
  * I am not running any commands that I know of which use encryption or require access to my private keys.

  Since I am  not doing anything which actually requires my private key,
  something is asking to unlock the keyring wrongly;

  Or else a background process (or trojan) is trying to communicate with
  somebody behind my back, using my private keys.

  This seems to be new (REGRESSION) as of 15.04, it did not occur before
  upgrading.

  The programs I *am* running are:
   *  Firefox
   * Thunderbird (I typed in it's Master Password previously, and it is working fine)
   *  Terminals
   *  A Java based web app (Interactive Brokers Trader Workstation)

  /var/log/auth.log contains the following:

  <username>: Executing command [USER=root] [TTY=unknown] [CWD=/home/<username>] [COMMAND=/usr/lib/update-notifier/package-system-locked]
  bus acquired: org.gnome.keyring.SystemPrompter
  Gcr: registering prompter
  bus acquired: org.gnome.keyring.PrivatePrompter
  Gcr: received BeginPrompting call from callback /org/gnome/keyring/Prompt/p22@:1.259
  Gcr: preparing a prompt for callback /org/gnome/keyring/Prompt/p22@:1.259
  Gcr: creating new GcrPromptDialog prompt
  Gcr: automatically selecting secret exchange protocol
  Gcr: generating public key
  Gcr: beginning the secret exchange: [sx-aes-1]\npublic=RnT9opj6kZDvJpr8QyIBH4DE/xn3wid1Di7mdEuIgT/GCBA1mLB3VdsldoT6WMdJeD15xlSIvvmAiLLR59dffthvV+cifN3K1WoJhFdBDSiBLmkI4wfGXEnQTmJn7iZfyGWsIVqL5cSgG3AEMGKgY4ORzBARp8TLqjnfnoJB3YSh/gNFVs5OT5pCATNeaDN1mx9LzOCuCSwVDXIIY6uV8sjhBpBvQQCNNEV960L2pZYvGsBYMKeriKxvZAJfiO04\n
  Gcr: calling the PromptReady method on /org/gnome/keyring/Prompt/p22@:1.259
  acquired name: org.gnome.keyring.SystemPrompter
  acquired name: org.gnome.keyring.PrivatePrompter
  Gcr: returned from the PromptReady method on /org/gnome/keyring/Prompt/p22@:1.259
  Gcr: received PerformPrompt call from callback /org/gnome/keyring/Prompt/p22@:1.259
  Gcr: receiving secret exchange: [sx-aes-1]\npublic=RL9s/tyPJRw80JDQNBGC+0uQxXfk1uAvJH9XoAULcI4ys/b/Rfz9QNvujXVlhp02Yot7S7K6l5KLBc3i6Ry9SPECjeDm6Y5E4Ry43OmOKjBf7JBUcUvrzfUvwJ87YZ0fYCW8j9nDgrBxt1utCOUDJDHVVANdIK8CMIEXnffiKYjsPq8yjueenqdnM+G8VUoBke8U1Bmc0IHs8elTBBWnoeLQdpnLcpn7k245vO5V4w8Gl3ZZtYrw7t6xxZstRAXR\n
  Gcr: deriving shared transport key
  Gcr: deriving transport key
  Gcr: starting password prompt for callback /org/gnome/keyring/Prompt/p22@:1.259
  Gtk: GtkDialog mapped without a transient parent. This is discouraged.
  Gcr: completed password prompt for callback :1.259@/org/gnome/keyring/Prompt/p22
  Gcr: sending the secret exchange: [sx-aes-1]\npublic=RnT9opj6kZDvJpr8QyIBH4DE/xn3wid1Di7mdEuIgT/GCBA1mLB3VdsldoT6WMdJeD15xlSIvvmAiLLR59dffthvV+cifN3K1WoJhFdBDSiBLmkI4wfGXEnQTmJn7iZfyGWsIVqL5cSgG3AEMGKgY4ORzBARp8TLqjnfnoJB3YSh/gNFVs5OT5pCATNeaDN1mx9LzOCuCSwVDXIIY6uV8sjhBpBvQQCNNEV960L2pZYvGsBYMKeriKxvZAJfiO04\n
  Gcr: calling the PromptReady method on /org/gnome/keyring/Prompt/p22@:1.259
  Gcr: returned from the PromptReady method on /org/gnome/keyring/Prompt/p22@:1.259
  Gcr: received PerformPrompt call from callback /org/gnome/keyring/Prompt/p22@:1.259
  Gcr: stopping prompting for operation /org/gnome/keyring/Prompt/p22@:1.259
  Gcr: closing the prompt

  ProblemType: Bug
  DistroRelease: Ubuntu 15.04
  Package: gnome-session-bin 3.14.0-2ubuntu5
  ProcVersionSignature: Ubuntu 3.19.0-23.24-generic 3.19.8-ckt2
  Uname: Linux 3.19.0-23-generic x86_64
  NonfreeKernelModules: nvidia
  ApportVersion: 2.17.2-0ubuntu1.1
  Architecture: amd64
  CurrentDesktop: Unity
  Date: Mon Jul 13 18:56:02 2015
  InstallationDate: Installed on 2013-08-06 (707 days ago)
  InstallationMedia: Ubuntu 13.04 "Raring Ringtail" - Release amd64 (20130424)
  SourcePackage: gnome-session
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-session/+bug/1474182/+subscriptions