Bug#1061444: pcscd: GDM user is NOT authorized for action: access_pcsc

Package: pcscd
Version: 2.0.1-1
Severity: normal
X-Debbugs-Cc: [email protected]

Hello,

When looking at the logs of pcscd, I see the following messages:

jan 22 09:47:37 edoras pcscd[1663]: 00000000 auth.c:125:IsClientAuthorized() Error in authorization: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Process not found
jan 22 09:47:37 edoras pcscd[1663]: 00000031 auth.c:143:IsClientAuthorized() Process 1565 (user: 115) is NOT authorized for action: access_pcsc

It seems that GDM is not allowed to talk to pcscd.

GDM has the functionality to detect whether there is a smartcard in the
reader and then use the gdm-smartcard PAM service instead of the
gdm-password one to perform login.

I guess that GDM should be whitelisted to allow it to use pcscd?

Kind regards,
Laurent Bigonville

-- System Information:
Debian Release: trixie/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1, 'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 6.6.11-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=fr_BE.UTF-8, LC_CTYPE=fr_BE.UTF-8 (charmap=UTF-8), LANGUAGE=fr_BE:fr
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: SELinux: enabled - Mode: Permissive - Policy name: refpolicy

Versions of packages pcscd depends on:
ii  init-system-helpers         1.66
ii  libc6                       2.37-13
ii  libccid [pcsc-ifd-handler]  1.5.5-1
ii  libglib2.0-0                2.78.3-1
ii  libpcsclite1                2.0.1-1
ii  libpolkit-gobject-1-0       124-1
ii  libsystemd0                 255.2-4
ii  libudev1                    255.2-4

pcscd recommends no packages.

Versions of packages pcscd suggests:
ii  systemd  255.2-4

-- no debconf information