dx-packages team mailing list archive

[Sebastien Bacher <seb128@xxxxxxxxxx>]

I just discussed that with Robert the current rule is

      <allow_any>auth_self</allow_any>
      <allow_inactive>auth_self</allow_inactive>
      <allow_active>yes</allow_active>

the "allow_any" doesn't override the other ones, but active/inactive
apply to your local session when active/inactive, the any applies to non
local session (e.g ssh case), so the patch fixed the issue with local
locked session but not with ssh

letting any client do changes is relaxing a bit permissions but
shouldn't be an issue since it only concerns non sensitive datas
(locale, keyboard, etc), still I would like a security team comment
before doing the change .... Marc, do you have an opinion there?

-- 
You received this bug notification because you are a member of DX
Packages, which is subscribed to accountsservice in Ubuntu.
Matching subscriptions: dx-packages
https://bugs.launchpad.net/bugs/1512002

Title:
  Annoying dialog "Authentication is required to change your own user
  data"

Status in accountsservice:
  Confirmed
Status in accountsservice package in Ubuntu:
  Triaged
Status in indicator-messages package in Ubuntu:
  Confirmed
Status in policykit-1-gnome package in Ubuntu:
  Confirmed

Bug description:
  Every few days a dialog pops up saying "Authentication is required to change your own user data" with an entry field for a password. If I type my user's password the dialog will reappear with an empty entry field. If I click on the cross to close the window many times it will be gone, but reappear a few days later. I don't know what this window is for and it makes no difference whether I close it or leave it. I don't use the gnome keyring.
  This started with Ubuntu 15.04 or maybe with an earlier release, and is still there in Ubuntu 15.10, also on machines I did a fresh install.

To manage notifications about this bug go to:
https://bugs.launchpad.net/accountsservice/+bug/1512002/+subscriptions