Bug 706908

Summary: Authentication for color device required before login
Product: [openSUSE] openSUSE 12.1 Reporter: Casual J. Programmer <casualprogrammer>
Component: GNOMEAssignee: Vincent Untz <vuntz>
Status: RESOLVED DUPLICATE QA Contact: E-mail List <qa-bugs>
Severity: Normal    
Priority: P5 - None CC: forgotten_VwC0v2dy2L, lnussel, s2, zaitor
Version: Factory   
Target Milestone: ---   
Hardware: i686   
OS: SUSE Other   
Whiteboard:
Found By: --- Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---

Description Casual J. Programmer 2011-07-20 06:25:36 UTC 
User-Agent:       Mozilla/5.0 (X11; Linux i686; rv:5.0) Gecko/20100101 Firefox/5.0

For some time now I get three prompts for root authorization before I can log in.

#cat /var/log/messages | grep color
Jul 13 07:02:25 workstation6l polkitd(authority=local): Operator of unix-session:/org/freedesktop/ConsoleKit/Session2 successfully authenticated as unix-user:root to gain ONE-SHOT authorization for action org.freedesktop.color-manager.create-device for system-bus-name::1.12 [/usr/lib/gnome-settings-daemon-3.0/gnome-settings-daemon] (owned by unix-user:gdm)
Jul 13 07:02:49 workstation6l polkitd(authority=local): Operator of unix-session:/org/freedesktop/ConsoleKit/Session2 successfully authenticated as unix-user:root to gain ONE-SHOT authorization for action org.freedesktop.color-manager.create-profile for system-bus-name::1.12 [/usr/lib/gnome-settings-daemon-3.0/gnome-settings-daemon] (owned by unix-user:gdm)
Jul 13 07:02:56 workstation6l polkitd(authority=local): Operator of unix-session:/org/freedesktop/ConsoleKit/Session2 successfully authenticated as unix-user:root to gain ONE-SHOT authorization for action org.freedesktop.color-manager.modify-device for system-bus-name::1.12 [/usr/lib/gnome-settings-daemon-3.0/gnome-settings-daemon] (owned by unix-user:gdm)

#cat /etc/SuSE-release
openSUSE 12.1 Milestone 3 (i586)
VERSION = 12.1
CODENAME = Asparagus




Reproducible: Always
Comment 1 John Andrew McInnes 2011-07-24 02:52:17 UTC 
openSUSE 12.1 M3 32bit

I get the same. When gdm first comes up, 3 dialog prompts in a row for root password. If you press cancel on the first one then they go away. "Authentication required for color device" or some such..

reproduce:
1. Install 12.1 M3: Select xfce as desktop environment (i'm guessing GNOME would have the same issue also)
2. Initial boot.
3. gdm loads and then prompt is shown.
Comment 2 Bjørn Lie 2011-08-16 19:11:23 UTC 
Apparantly we need new polkit policies for this bug to go away, handing over to security
Comment 3 Ludwig Nussel 2011-08-23 07:31:44 UTC 
Why would gdm do that?
Comment 4 Vincent Untz 2011-09-22 14:37:47 UTC 
It's just that gdm has a color-managed session, I guess.
Comment 5 Ludwig Nussel 2011-09-23 11:34:31 UTC 
That smells fishy.
Comment 6 Vincent Untz 2011-09-23 13:08:13 UTC 
(In reply to comment #5)
> That smells fishy.

Why?

GDM is actually using a real GNOME session. And since color management is done in gnome-settings-daemon, GDM runs this code too. Which actually makes sense -- you want the wallpaper to show with proper colors, after all.
Comment 7 Ludwig Nussel 2011-09-23 13:12:19 UTC 
why does it need privileges to tune colors of a wallpaper though?
Comment 8 Vincent Untz 2011-09-23 14:37:03 UTC 
(In reply to comment #7)
> why does it need privileges to tune colors of a wallpaper though?

That's polkit, see bug 698250 for the security review of colord.
Comment 9 Bjørn Lie 2011-09-28 19:34:20 UTC 
*** Bug 720972 has been marked as a duplicate of this bug. ***
Comment 10 Forgotten User VwC0v2dy2L 2011-10-03 14:54:10 UTC 
solved for me after last update
Comment 11 Garrett LeSage 2011-11-04 14:40:00 UTC 
I still get this on the desktop in 12.1 RC2 when toggling the state of the color management plugin via dconf (using dconf-editor): org > gnome > settings-daemon > plugins > color > active

I have to toggle it, as while it's set to be on by default, it isn't. When it is turned on, *several* root password prompts appear: one for each monitor, one for each profile for each monitor, and then a few more related color-management ones too.
Comment 12 Garrett LeSage 2011-11-04 14:42:01 UTC 
So basically: when profiles are created, they don't apply to GDM for whatever reason. This, and the fact that it isn't properly on by default on the desktop (even though it says it is), lead me to believe that this was most likely "fixed" in an incorrect manner.
Comment 13 Vincent Untz 2011-12-07 08:22:59 UTC 
I confirmed this is directly related to bug 698250 (see last few comments there).

*** This bug has been marked as a duplicate of bug 698250 ***