Devuan bug report logs - #806
Does not allow access to smartcard anymore - not even as root

Package: pcscd; Reported by: Klaus Ethgen <[email protected]>; dated Mon, 27 Nov 2023 08:47:20 UTC; Maintainer for pcscd is Devuan Developers <[email protected]>.

Message received at [email protected]:

Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=5.9.7.51; helo=tschil.ethgen.ch; [email protected]; receiver=<UNKNOWN> 
Date: Mon, 27 Nov 2023 19:49:22 +0100
From: Klaus Ethgen <[email protected]>
To: Mark Hindley <[email protected]>
Cc: [email protected]
Subject: Re: bug#806: Does not allow access to smartcard anymore - not even
 as root
Message-ID: <[email protected]>
References: <[email protected]>
 <[email protected]>
 <[email protected]>
 <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="sWkuafWzDO+st3RQ"
Content-Disposition: inline
In-Reply-To: <[email protected]>
OpenPGP: id=79D0B06F4E20AF1C;
 url=http://www.ethgen.ch/~klaus/79D0B06F4E20AF1C.txt; preference=signencrypt


--sWkuafWzDO+st3RQ
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline

Hi,

here is a patch to revert to the behaviour before:
diff -Nur pcsc-lite-2.0.1.orig/debian/changelog pcsc-lite-2.0.1/debian/changelog
--- pcsc-lite-2.0.1.orig/debian/changelog	2023-11-24 17:43:35.000000000 +0100
+++ pcsc-lite-2.0.1/debian/changelog	2023-11-27 19:44:53.253102673 +0100
@@ -1,3 +1,10 @@
+pcsc-lite (2.0.1-1.1) UNRELEASED; urgency=medium
+
+  * Non-maintainer upload.
+  * Disable Policykit again.
+
+ -- Klaus Ethgen <[email protected]>  Mon, 27 Nov 2023 19:44:35 +0100
+
 pcsc-lite (2.0.1-1) unstable; urgency=medium
 
   * new upstream release
diff -Nur pcsc-lite-2.0.1.orig/debian/control pcsc-lite-2.0.1/debian/control
--- pcsc-lite-2.0.1.orig/debian/control	2023-11-24 17:43:35.000000000 +0100
+++ pcsc-lite-2.0.1/debian/control	2023-11-27 19:45:57.968764118 +0100
@@ -5,7 +5,6 @@
 Build-Depends: autoconf-archive,
 	debhelper-compat (= 13),
 	flex,
-	libpolkit-gobject-1-dev,
 	libsystemd-dev,
 	libudev-dev [linux-any],
 	libusb2-dev [kfreebsd-any],
diff -Nur pcsc-lite-2.0.1.orig/debian/pcscd.install pcsc-lite-2.0.1/debian/pcscd.install
--- pcsc-lite-2.0.1.orig/debian/pcscd.install	2023-11-24 17:43:35.000000000 +0100
+++ pcsc-lite-2.0.1/debian/pcscd.install	2023-11-27 19:46:12.386134261 +0100
@@ -1,4 +1,3 @@
 usr/sbin/pcscd
-usr/share/polkit-1/actions/org.debian.pcsc-lite.policy
 lib/systemd/system/pcscd.socket
 lib/systemd/system/pcscd.service
diff -Nur pcsc-lite-2.0.1.orig/debian/rules pcsc-lite-2.0.1/debian/rules
--- pcsc-lite-2.0.1.orig/debian/rules	2023-11-24 17:43:35.000000000 +0100
+++ pcsc-lite-2.0.1/debian/rules	2023-11-27 19:45:29.521033779 +0100
@@ -15,6 +15,7 @@
 		--with-systemdsystemunitdir=/lib/systemd/system \
 		--enable-usbdropdir=/usr/lib/pcsc/drivers \
 		--enable-ipcdir=/run/pcscd \
+		--disable-polkit \
 		$(shell dpkg-buildflags --export=configure)
 
 ifeq ($(shell dpkg-vendor --is Ubuntu && echo yes) $(DEB_HOST_ARCH), yes i386)

Regards
   Klaus
-- 
Klaus Ethgen                                       http://www.ethgen.ch/
pub  4096R/4E20AF1C 2011-05-16            Klaus Ethgen <[email protected]>
Fingerprint: 85D4 CA42 952C 949B 1753  62B3 79D0 B06F 4E20 AF1C

--sWkuafWzDO+st3RQ
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
Comment: Charset: ISO-8859-1

iQGzBAABCgAdFiEEMWF28vh4/UMJJLQEpnwKsYAZ9qwFAmVk5LIACgkQpnwKsYAZ
9qwlSAwAsKM3hnNuLU0PrLAcIvslyHB0ZPVq9N9Bpp5/CbBwPiTtqqEmKKU3HmPr
Kv6+osA4fbl6wKNbBEnM1SSfX4Gp+yWM5zrW6Se9KZoJfM9Z8OcrmS4VVVPQooeC
bpJfRqqmmS17z199DdXKNx0h+HMnxQ+JeawM/6xaKGmhF+rIQ/N2hJs1vR7A7ZHI
lNl/1mONxowrocRrtanqlCKhnS+XBzQJ8WSogqBXsYt1mYp/SZJT3VvVKzIHddAr
+KwVXbg3ci4IOtsdxDv9mhHveqt8R1f5vCwcDyeYeaJG17wSF92aGip7NBlvV8P1
9PUdD/EDTFXhevh/sKgnRtjPXpttQkXtGpAg/wbYRn0noKwYIGOxY0wNZAZ+LZos
Dz8cAe0PCqFOj+HmUjVo+tCubMcei9/5JIPinLB0St5KkgT60j7IK+35Qx72Kj6j
l7n2rNY9mxQ1jAQpAM65NEh6H38OO2KYd5bQPnofIUs5EmC4BRIgJzblF0/Ng2b9
GsKyW2ka
=1Dbn
-----END PGP SIGNATURE-----

--sWkuafWzDO+st3RQ--

Acknowledgement sent to Klaus Ethgen <[email protected]>:
Extra info received and forwarded to list. Copy sent to Devuan Developers <[email protected]>. Full text available.

Information forwarded to [email protected], Devuan Developers <[email protected]>:
bug#806; Package pcscd. Full text available.

Message received at [email protected]:

Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=5.9.7.51; helo=tschil.ethgen.ch; [email protected]; receiver=<UNKNOWN> 
Date: Mon, 27 Nov 2023 19:37:34 +0100
From: Klaus Ethgen <[email protected]>
To: Mark Hindley <[email protected]>
Cc: [email protected]
Subject: Re: bug#806: Does not allow access to smartcard anymore - not even
 as root
Message-ID: <[email protected]>
References: <[email protected]>
 <[email protected]>
 <[email protected]>
 <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="/CnQQSOY8GGxDF87"
Content-Disposition: inline
In-Reply-To: <[email protected]>
OpenPGP: id=79D0B06F4E20AF1C;
 url=http://www.ethgen.ch/~klaus/79D0B06F4E20AF1C.txt; preference=signencrypt


--/CnQQSOY8GGxDF87
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi Mark,

Am Mo den 27. Nov 2023 um 19:29 schrieb Mark Hindley:
> > > Do you have polkitd installed and running?
> > >=20
> > > Are you using elogind or consolekit? If elogind, do you have=20
> > > libpam-elogind installed?
> >=20
> > No, none.
>=20
> So you will need either libpam-elogind or consolekit. Either should pull =
in
> polkitd.

I really care to not have that stuff installed on my system. The *kit
stuff from p=F6ttering is poisoned.

And I see no sense in using that crap either. pcscd did work well for
ages without.

> Alternatively, edit /usr/share/polkit-1/actions/org.debian.pcsc-lite.poli=
cy to
> your liking.

Well, I am not sure if that work without having policykit. But I can try
and remove that file.

Regards
   Klaus
--=20
Klaus Ethgen                                       http://www.ethgen.ch/
pub  4096R/4E20AF1C 2011-05-16            Klaus Ethgen <[email protected]>
Fingerprint: 85D4 CA42 952C 949B 1753  62B3 79D0 B06F 4E20 AF1C

--/CnQQSOY8GGxDF87
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
Comment: Charset: ISO-8859-1

iQGzBAABCgAdFiEEMWF28vh4/UMJJLQEpnwKsYAZ9qwFAmVk4egACgkQpnwKsYAZ
9qxeSQv/SQQ9SPUzoTB9WOKIdr/TTTM2shzWnbjyPOOQmWLDQLcHHpDK88vuPIZm
xpkQm2ysQ+RBneMwoEag+LjnHhhdLZGbn5sjsx/ocmsiVyMy/dRUZ5Ya8Ds1nHZu
LE8NyIakxxnjQwv5DmvGVrWNUnqDxbl4Yqe+pKFygV2WRHFHFTU5oW0KcQHE1Fqn
hPtLh4bcfkkCp6X68bOW4Q2gj0DCufNHmz8q5uZyrPAcNtUbHiJzwMbAcGbDNxf4
NZ3AAH2gjHahFs9/TQLCnQ+J3V22PKATqsklqUpd9SLv6bhArBm+BKQb25QC3wZW
AEzOlhrcp5VUZZuteOX64TPA1spWvfyxRK6gO0DunfyOzmo08vNSHu8oMIjrakVf
ojih6GI9MotXMSUM2Qh///vDOcPzju+M0bDeJWCyRMdegYaNYw4MWE3phz46yojC
+ZOV89usrK3LPbdwpgto2c4+fq4Gu+ZxSXjUNTXC9EcdgFZG2FWcUoUWISNavHEb
g5N1sDOH
=ypYn
-----END PGP SIGNATURE-----

--/CnQQSOY8GGxDF87--

Acknowledgement sent to Klaus Ethgen <[email protected]>:
Extra info received and forwarded to list. Copy sent to Devuan Developers <[email protected]>. Full text available.

Information forwarded to [email protected], Devuan Developers <[email protected]>:
bug#806; Package pcscd. Full text available.

Message received at [email protected]:

Received: (at 806) by bugs.devuan.org; 27 Nov 2023 18:30:14 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from email.devuan.org [2a01:4f8:a0:3284::74ca:8ad2]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Mon, 27 Nov 2023 18:30:14 +0000 (UTC)
Received: from email.devuan.org
	by email.devuan.org with LMTP
	id SPuZNhzgZGXyAQAAmSBk0A
	(envelope-from <[email protected]>)
	for <[email protected]>; Mon, 27 Nov 2023 18:29:48 +0000
Received: by email.devuan.org (Postfix, from userid 109)
	id C4F1C5A; Mon, 27 Nov 2023 18:29:48 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level: 
X-Spam-Status: No, score=0.4 required=5.0 tests=RDNS_DYNAMIC,SPF_PASS
	autolearn=no autolearn_force=no version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=193.36.131.86; helo=mx.hindley.org.uk; [email protected]; receiver=<UNKNOWN> 
Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86])
	by email.devuan.org (Postfix) with ESMTPS id 69F1C27
	for <[email protected]>; Mon, 27 Nov 2023 18:29:48 +0000 (UTC)
Received: from hindley.org.uk (apollo.hindleynet [192.168.1.3])
	by mx.hindley.org.uk (Postfix) with SMTP id 9CB9D9F4;
	Mon, 27 Nov 2023 18:29:46 +0000 (GMT)
Received: (nullmailer pid 29667 invoked by uid 1000);
	Mon, 27 Nov 2023 18:29:46 -0000
Date: Mon, 27 Nov 2023 18:29:45 +0000
From: Mark Hindley <[email protected]>
To: Klaus Ethgen <[email protected]>
Cc: [email protected]
Subject: Re: bug#806: Does not allow access to smartcard anymore - not even
 as root
Message-ID: <[email protected]>
References: <[email protected]>
 <[email protected]>
 <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <[email protected]>

On Mon, Nov 27, 2023 at 06:23:54PM +0100, Klaus Ethgen wrote:
> Hi,
> 
> Am Mo den 27. Nov 2023 um 16:55 schrieb Mark Hindley:
> > On Mon, Nov 27, 2023 at 09:43:08AM +0100, Klaus Ethgen wrote:
> > > Since the last update, noone is able to access smartcards anymore.
> > 
> > I suspect this is the new policykit policy now included upstream. See 
> > changelog.
> 
> Yes, I seen such.
> 
> > Do you have polkitd installed and running?
> > 
> > Are you using elogind or consolekit? If elogind, do you have 
> > libpam-elogind installed?
> 
> No, none.

So you will need either libpam-elogind or consolekit. Either should pull in
polkitd.

Alternatively, edit /usr/share/polkit-1/actions/org.debian.pcsc-lite.policy to
your liking.

Mark

Acknowledgement sent to Mark Hindley <[email protected]>:
Extra info received and forwarded to list. Copy sent to Devuan Developers <[email protected]>. Full text available.

Information forwarded to [email protected], Devuan Developers <[email protected]>:
bug#806; Package pcscd. Full text available.

Message received at [email protected]:

Received: (at 806) by bugs.devuan.org; 27 Nov 2023 18:16:43 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from email.devuan.org [2a01:4f8:a0:3284::74ca:8ad2]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Mon, 27 Nov 2023 18:16:43 +0000 (UTC)
Received: from email.devuan.org
	by email.devuan.org with LMTP
	id m9EEFuHcZGWrAQAAmSBk0A
	(envelope-from <[email protected]>)
	for <[email protected]>; Mon, 27 Nov 2023 18:16:01 +0000
Received: by email.devuan.org (Postfix, from userid 109)
	id 3DB3F5A; Mon, 27 Nov 2023 18:16:01 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level: 
X-Spam-Status: No, score=-2.1 required=5.0 tests=DKIM_INVALID,DKIM_SIGNED,
	RCVD_IN_DNSWL_MED,SPF_PASS autolearn=ham autolearn_force=no
	version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=5.9.7.51; helo=tschil.ethgen.ch; [email protected]; receiver=<UNKNOWN> 
Received: from tschil.ethgen.ch (tschil.ethgen.ch [5.9.7.51])
	by email.devuan.org (Postfix) with ESMTPS id CC28727
	for <[email protected]>; Mon, 27 Nov 2023 18:15:59 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ethgen.de;
	 s=mail; h=In-Reply-To:Content-Type:MIME-Version:References:Message-ID:
	Subject:Cc:To:From:Date:Sender:Reply-To:Content-Transfer-Encoding:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
	:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
	List-Post:List-Owner:List-Archive;
	bh=kJFKR+MsbUh44ZZE5I8ULe3W8rI3cZ95SH5vxCLXJog=; b=uIPXvOIgWm7puMJKB45qUqQAUQ
	lHkjP7VABCcRZeQAeIJYun45Ffb6byyGMqpoVBxF5MkCiBa2bOkW0iVuBTiRkGi7K/5GLHUqhxom+
	3g7J1Zj4IOY+3bNq+Q9fj08unB1KNV/s/P1dPJaTo7oeblX5MxlBPvSFDcg1hHib4gDd1YYobanBe
	sm2e0oPZ0XPj47Q0dhucKWKEFf+iXEXxaiB+HEt5b2hSOwOIpFwQuR8EfTpJNE2YpWFCixnmkDoIm
	1LaWrXiQP0XmOVDe2yjP6NSP0f4pytUVx+sGiGi96LPRIIdP4XeuRemHh5IfsbG1SbtYJifbpoSG/
	NH350q+Hhsa0bsfWeCR/+Gix6UcCInJ0gU4rifHjGS1GUfLRJN8/t7Ddret/og24iWjhdkAHOs/Gl
	SI0J3g4SDIlxyjELGYeoOWKEL51cfUUTO1fgt24yrkT/2Q6NdUjz8zC4zKHvVSlIOmfRIuOTie9Gs
	Rmd74n7PT+0+lvn7gb595+oD9aPFtUOafv5wKxEt/lUOqjZQsgihO+xWKdomHJDUM36psIuMQKO41
	f26THgaeIBBCy/KKw5S5xQuEpHH/yBrNSR5VL/SNoQfhh6gnD+gCtBTtdVjXg+yeG6zWbqJ5KTch7
	fALpGuTHxiQkv0ZzkT93Al1tn7rtVJkdqm+qGI8F8=;
Received: from [192.168.17.4] (helo=ikki.ket)
	by tschil.ethgen.ch with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256)
	(Exim 4.92)
	(envelope-from <[email protected]>)
	id 1r7g9G-0003yB-Ao; Mon, 27 Nov 2023 18:15:58 +0000
Received: from klaus by ikki.ket with local (Exim 4.97)
	(envelope-from <[email protected]>)
	id 1r7g9G-000000004t1-0XAs;
	Mon, 27 Nov 2023 19:15:58 +0100
Date: Mon, 27 Nov 2023 19:15:58 +0100
From: Klaus Ethgen <[email protected]>
To: Mark Hindley <[email protected]>
Cc: [email protected]
Subject: Re: bug#806: Does not allow access to smartcard anymore - not even
 as root
Message-ID: <[email protected]>
References: <[email protected]>
 <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="hXCU7iaOmpZbet5+"
Content-Disposition: inline
In-Reply-To: <[email protected]>
OpenPGP: id=79D0B06F4E20AF1C;
 url=http://www.ethgen.ch/~klaus/79D0B06F4E20AF1C.txt; preference=signencrypt


--hXCU7iaOmpZbet5+
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline

This is the error I get:
Nov 27 18:56:00 ikki pcscd: auth.c:125:IsClientAuthorized() Error in authorization: GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name org.freedesktop.PolicyKit1 was not provided by any .service files
Nov 27 18:56:00 ikki pcscd: auth.c:143:IsClientAuthorized() Process 22538 (user: 10230) is NOT authorized for action: access_pcsc
Nov 27 18:56:00 ikki pcscd: winscard_svc.c:355:ContextThread() Rejected unauthorized PC/SC client

Regards
   Klaus
-- 
Klaus Ethgen                                       http://www.ethgen.ch/
pub  4096R/4E20AF1C 2011-05-16            Klaus Ethgen <[email protected]>
Fingerprint: 85D4 CA42 952C 949B 1753  62B3 79D0 B06F 4E20 AF1C

--hXCU7iaOmpZbet5+
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
Comment: Charset: ISO-8859-1
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=KuiS
-----END PGP SIGNATURE-----

--hXCU7iaOmpZbet5+--

Acknowledgement sent to Klaus Ethgen <[email protected]>:
Extra info received and forwarded to list. Copy sent to Devuan Developers <[email protected]>. Full text available.

Information forwarded to [email protected], Devuan Developers <[email protected]>:
bug#806; Package pcscd. Full text available.

Message received at [email protected]:

Received: (at 806) by bugs.devuan.org; 27 Nov 2023 17:24:25 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from email.devuan.org [2a01:4f8:a0:3284::74ca:8ad2]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Mon, 27 Nov 2023 17:24:25 +0000 (UTC)
Received: from email.devuan.org
	by email.devuan.org with LMTP
	id GWN2CLDQZGXkfAAAmSBk0A
	(envelope-from <[email protected]>)
	for <[email protected]>; Mon, 27 Nov 2023 17:24:00 +0000
Received: by email.devuan.org (Postfix, from userid 109)
	id 17F0298; Mon, 27 Nov 2023 17:24:00 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level: 
X-Spam-Status: No, score=-2.1 required=5.0 tests=DKIM_INVALID,DKIM_SIGNED,
	RCVD_IN_DNSWL_MED,SPF_PASS autolearn=ham autolearn_force=no
	version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=5.9.7.51; helo=tschil.ethgen.ch; [email protected]; receiver=<UNKNOWN> 
Received: from tschil.ethgen.ch (tschil.ethgen.ch [5.9.7.51])
	by email.devuan.org (Postfix) with ESMTPS id DFCAE27
	for <[email protected]>; Mon, 27 Nov 2023 17:23:56 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ethgen.de;
	 s=mail; h=In-Reply-To:Content-Type:MIME-Version:References:Message-ID:
	Subject:Cc:To:From:Date:Sender:Reply-To:Content-Transfer-Encoding:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
	:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
	List-Post:List-Owner:List-Archive;
	bh=v26cmzpx+oL2/Zpl34ceBouC+BlLwzb8msVxFMvbxVI=; b=ancgsFyKGDs9ik4yseK5RNizUC
	RxbZTXwsitIl9y688zgRq+ryIY9/XOS0HiMQORt1EcWI+31kO8VwgGY0hxNjhc/3Dk/X/MxMLU+oa
	kRavXxy0R2OAUJcfJpTsfb1+3LR6EHEqlZFj755gvNoU/QbOsFbGd4uLeYWK02NqYFY9bUv4WIFpW
	7Gsra+95NaCz+wmjoOmWqGXr9blVvbMcpOx7TwSpTqclvNOE2qx2uH9IFvXPDsg7xTSo497nJfFot
	0dzuKORR5lCApH4J1QF66VvHzL0/xJnSEjtlSreS5RaUyYfLDJgaT9CZLnWPLJMt5UV1MyBgvtl1W
	bWZE/O+MgtPF+7u7Q24t2Lb5LxTq9u3vM7U1NfTgvIN7mis+6zDnpDQ9KOBs8zHep2LgVWTOcQt5A
	FXwJWjUVMXLm6L/y8nGEsyYFidABIVfDg1/9KtNWcq5tfcQ4pSn/mz5weNJz/H0Cl7/szfO2/Q4y+
	lF6oOX3la1YYru2wAe7ZOO2aJp39xtZz5oSNo34jTQrNiNUWNVe6PnaxQK0XqzTNM/6Kv6lsQduJM
	TRLJ/RX7cTSwQ1tRw5/ezHcZHZ//fDL2l8Ywt8Ebw3aE2BF0iaNHg5kDM0hyhTRVgvk8yUsWlTHR1
	NtoqiKvCBRZq+5geJ/ORsFbmOLmYqU7coRLoLZMrI=;
Received: from [192.168.17.4] (helo=ikki.ket)
	by tschil.ethgen.ch with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256)
	(Exim 4.92)
	(envelope-from <[email protected]>)
	id 1r7fKs-0003lM-VN; Mon, 27 Nov 2023 17:23:55 +0000
Received: from klaus by ikki.ket with local (Exim 4.97)
	(envelope-from <[email protected]>)
	id 1r7fKs-000000006pG-2x7R;
	Mon, 27 Nov 2023 18:23:54 +0100
Date: Mon, 27 Nov 2023 18:23:54 +0100
From: Klaus Ethgen <[email protected]>
To: Mark Hindley <[email protected]>
Cc: [email protected]
Subject: Re: bug#806: Does not allow access to smartcard anymore - not even
 as root
Message-ID: <[email protected]>
References: <[email protected]>
 <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="MK6CyUVc/ZR6w7iz"
Content-Disposition: inline
In-Reply-To: <[email protected]>
OpenPGP: id=79D0B06F4E20AF1C;
 url=http://www.ethgen.ch/~klaus/79D0B06F4E20AF1C.txt; preference=signencrypt


--MK6CyUVc/ZR6w7iz
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline

Hi,

Am Mo den 27. Nov 2023 um 16:55 schrieb Mark Hindley:
> On Mon, Nov 27, 2023 at 09:43:08AM +0100, Klaus Ethgen wrote:
> > Since the last update, noone is able to access smartcards anymore.
> 
> I suspect this is the new policykit policy now included upstream. See 
> changelog.

Yes, I seen such.

> Do you have polkitd installed and running?
> 
> Are you using elogind or consolekit? If elogind, do you have 
> libpam-elogind installed?

No, none.

Regards
   Klaus
-- 
Klaus Ethgen                                       http://www.ethgen.ch/
pub  4096R/4E20AF1C 2011-05-16            Klaus Ethgen <[email protected]>
Fingerprint: 85D4 CA42 952C 949B 1753  62B3 79D0 B06F 4E20 AF1C

--MK6CyUVc/ZR6w7iz
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
Comment: Charset: ISO-8859-1
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=7HwM
-----END PGP SIGNATURE-----

--MK6CyUVc/ZR6w7iz--

Acknowledgement sent to Klaus Ethgen <[email protected]>:
Extra info received and forwarded to list. Copy sent to Devuan Developers <[email protected]>. Full text available.

Information forwarded to [email protected], Devuan Developers <[email protected]>:
bug#806; Package pcscd. Full text available.

Message received at [email protected]:

Received: (at 806) by bugs.devuan.org; 27 Nov 2023 15:56:02 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from email.devuan.org [2a01:4f8:a0:3284::74ca:8ad2]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Mon, 27 Nov 2023 15:56:02 +0000 (UTC)
Received: from email.devuan.org
	by email.devuan.org with LMTP
	id 4KC1JN27ZGUNdQAAmSBk0A
	(envelope-from <[email protected]>)
	for <[email protected]>; Mon, 27 Nov 2023 15:55:09 +0000
Received: by email.devuan.org (Postfix, from userid 109)
	id 89E9998; Mon, 27 Nov 2023 15:55:09 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level: 
X-Spam-Status: No, score=0.4 required=5.0 tests=RDNS_DYNAMIC,SPF_PASS
	autolearn=no autolearn_force=no version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=193.36.131.86; helo=mx.hindley.org.uk; [email protected]; receiver=<UNKNOWN> 
Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86])
	by email.devuan.org (Postfix) with ESMTPS id 235FE27
	for <[email protected]>; Mon, 27 Nov 2023 15:55:04 +0000 (UTC)
Received: by mx.hindley.org.uk (Postfix, from userid 1000)
	id 102CA9CC; Mon, 27 Nov 2023 15:55:01 +0000 (GMT)
Date: Mon, 27 Nov 2023 15:55:01 +0000
From: Mark Hindley <[email protected]>
To: Klaus Ethgen <[email protected]>, [email protected]
Subject: Re: bug#806: Does not allow access to smartcard anymore - not even
 as root
Message-ID: <[email protected]>
References: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <[email protected]>
X-Debbugs-No-Ack: No Thanks

On Mon, Nov 27, 2023 at 09:43:08AM +0100, Klaus Ethgen wrote:
> Package: pcscd
> Version: 2.0.1-1devuan1
> Severity: normal
> 
> Since the last update, noone is able to access smartcards anymore.

I suspect this is the new policykit policy now included upstream. See 
changelog.

Do you have polkitd installed and running?

Are you using elogind or consolekit? If elogind, do you have 
libpam-elogind installed?

Mark

Information forwarded to [email protected], Devuan Developers <[email protected]>:
bug#806; Package pcscd. Full text available.

Message received at [email protected]:

Received: (at submit) by bugs.devuan.org; 27 Nov 2023 08:44:26 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from email.devuan.org [2a01:4f8:a0:3284::74ca:8ad2]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Mon, 27 Nov 2023 08:44:26 +0000 (UTC)
Received: from email.devuan.org
	by email.devuan.org with LMTP
	id FZnZJ6ZWZGX+VwAAmSBk0A
	(envelope-from <[email protected]>)
	for <[email protected]>; Mon, 27 Nov 2023 08:43:18 +0000
Received: by email.devuan.org (Postfix, from userid 109)
	id 98F7C721; Mon, 27 Nov 2023 08:43:18 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level: 
X-Spam-Status: No, score=-2.1 required=5.0 tests=DKIM_INVALID,DKIM_SIGNED,
	RCVD_IN_DNSWL_MED,SPF_PASS autolearn=ham autolearn_force=no
	version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=5.9.7.51; helo=tschil.ethgen.ch; [email protected]; receiver=<UNKNOWN> 
Received: from tschil.ethgen.ch (tschil.ethgen.ch [5.9.7.51])
	by email.devuan.org (Postfix) with ESMTPS id CAE3459
	for <[email protected]>; Mon, 27 Nov 2023 08:43:13 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ethgen.de;
	 s=mail; h=Content-Type:MIME-Version:Message-ID:Subject:To:From:Date:Sender:
	Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description:
	Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:
	In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
	List-Post:List-Owner:List-Archive;
	bh=FfkQg0tT8vUfBsqML5x1YCkv24KaFU4VpKqlFKi/egk=; b=K7AWiSlIyZoGffpKjo3V90YBKv
	uFfc6oGSDPj7xxZXmSprKch41cDN2yFHeO4P2OBr6LfEyOaVVvdk00ehgkkcGSdEvewmXEv9C9Vjw
	7x5nWZdEbxdfyEfVwstkfp1K+TZp5NarwycY6J+DdOtyricUWCHhSJOrn6PoUWJM7hlfejOEcP81g
	KUSANoEQ3W6k2Cb0MIxGdoK2AjVVFkfIwAdLUHjcqsEaPZc4vW4hsl5nGy0LbiDZLoPePrx8OKj8I
	L+FyxaDZEXAPtGx85ytV8I9lRd7v+vv41rDSRfo3QxAvb0fcRKNuMzl8odXc+37v+B6avV++pRqaS
	EJp0JD9HA8lKMWh9ZtShJ4DsMFbNst1fQU5GPUoyq2/lu8XQgxqbSELWtN5Bf/RyPl4W/mLG6+CCK
	Rx2ZE6Kfto3QbdpoliED6X/2ZNvez1kYW3JoMA79QyJt0Jyc2Ep7zMwnTuhdqoQa+bPpevEzIZ4Nf
	Txn00qxebVvxSxNESyOAlCWuYKXKpO9eTcz7s990IR7KHlxSj+v5IYjEsl3Nqq2DpyYv5+gBVr8AN
	UPTXHcsvBbj/3h2WAy+yCGAeByuRckjtfzTY72L6fEKbDmQ4nHcZpzwOU777tj8RhrrCsJPbTi80P
	DGCbh+UeVJYipWwztS74lJ/DCzEyiREP9XfeF04oY=;
Received: from [192.168.17.4] (helo=ikki.ket)
	by tschil.ethgen.ch with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256)
	(Exim 4.92)
	(envelope-from <[email protected]>)
	id 1r7XCu-0001l6-EV; Mon, 27 Nov 2023 08:43:08 +0000
Received: from klaus by ikki.ket with local (Exim 4.97)
	(envelope-from <[email protected]>)
	id 1r7XCu-0000000072j-0yZi;
	Mon, 27 Nov 2023 09:43:08 +0100
Date: Mon, 27 Nov 2023 09:43:08 +0100
From: Klaus Ethgen <[email protected]>
To: Devuan Bug Tracking System <[email protected]>
Subject: Does not allow access to smartcard anymore - not even as root
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="T6SQB3fPoanoTj6B"
Content-Disposition: inline
X-Reportbug-Version: 12.0.0+devuan2
OpenPGP: id=79D0B06F4E20AF1C;
 url=http://www.ethgen.ch/~klaus/79D0B06F4E20AF1C.txt; preference=signencrypt


--T6SQB3fPoanoTj6B
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Package: pcscd
Version: 2.0.1-1devuan1
Severity: normal

Since the last update, noone is able to access smartcards anymore.
Syslog reported sime GDBus errors. (As smartcard is not working, I
currently have no access to the logfiles. I will try to get the errors
=66rom another system.)

As I really depend on working smartcards (gnupg), I want to ask, where
to get the old package (2.0.0-1devuan1) from? Is there anythink like
snapshot.devuan.org?

-- System Information:
Distributor ID:	Devuan
Description:	Devuan GNU/Linux 6 (excalibur/ceres)
Release:	6
Codename:	excalibur ceres
Architecture: x86_64

Kernel: Linux 6.1.38 (SMP w/8 CPU threads)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_CPU_OUT_OF_SPEC, TAINT_=
FIRMWARE_WORKAROUND, TAINT_OOT_MODULE
Locale: LANG=3DC, LC_CTYPE=3DC.UTF-8 (charmap=3DUTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages pcscd depends on:
ii  init-system-helpers                                    1.65.2devuan1
ii  libc6                                                  2.37-12
ii  libccid [pcsc-ifd-handler]                             1.5.4-1
ii  libeudev1                                              3.2.14-1
ii  libglib2.0-0                                           2.78.1-4
ii  libpcsclite1                                           2.0.1-1devuan1
ii  libpolkit-gobject-1-0                                  123-3devuan1
ii  libpolkit-gobject-elogind-1-0 [libpolkit-gobject-1-0]  123-3devuan1

pcscd recommends no packages.

pcscd suggests no packages.

-- no debconf information
Gru=DF
   Klaus
--=20
Klaus Ethgen                                       http://www.ethgen.ch/
pub  4096R/4E20AF1C 2011-05-16            Klaus Ethgen <[email protected]>
Fingerprint: 85D4 CA42 952C 949B 1753  62B3 79D0 B06F 4E20 AF1C

--T6SQB3fPoanoTj6B
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
Comment: Charset: ISO-8859-1
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=lQPr
-----END PGP SIGNATURE-----

--T6SQB3fPoanoTj6B--

Acknowledgement sent to Klaus Ethgen <[email protected]>:
New bug report received and forwarded. Copy sent to Devuan Developers <[email protected]>. Full text available.

Report forwarded to [email protected], Devuan Developers <[email protected]>:
bug#806; Package pcscd. Full text available.

Devuan bug report logs - #806 Does not allow access to smartcard anymore - not even as root

Message received at [email protected]:

Message received at [email protected]:

Message received at [email protected]:

Message received at [email protected]:

Message received at [email protected]:

Message received at [email protected]:

Message received at [email protected]:

Devuan bug report logs - #806
Does not allow access to smartcard anymore - not even as root