After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 727982 - Quality Engineering noticed a problem with transient authentication sessions,
Quality Engineering noticed a problem with transient authentication sessions,
Status: RESOLVED FIXED
Product: gdm
Classification: Core
Component: general
unspecified
Other All
: Normal normal
: ---
Assigned To: GDM maintainers
GDM maintainers
Depends on:
Blocks:
 
 
Reported: 2014-04-10 17:23 UTC by Ray Strode [halfline]
Modified: 2014-04-10 17:24 UTC
See Also:
GNOME target: ---
GNOME version: ---


Attachments
session: introduce new client-rejected signal (11.70 KB, patch)
2014-04-10 17:24 UTC, Ray Strode [halfline]
committed Details | Review
manager: don't leak session objects when client is rejected (7.60 KB, patch)
2014-04-10 17:24 UTC, Ray Strode [halfline]
committed Details | Review
manager: be more accepting of callers with uids different from their session (3.43 KB, patch)
2014-04-10 17:24 UTC, Ray Strode [halfline]
committed Details | Review

Description Ray Strode [halfline] 2014-04-10 17:23:21 UTC
when running vncserver as a different user than the audit session the server
is running in.

These patches address that problem.
Comment 1 Ray Strode [halfline] 2014-04-10 17:24:19 UTC
Created attachment 274016 [details] [review]
session: introduce new client-rejected signal

If a client gets rejected because it's not allowed to connect
to a particular session, we really need to inform the owner
of the session object so it can do any clean up it needs to do,
if necessary.
Comment 2 Ray Strode [halfline] 2014-04-10 17:24:23 UTC
Created attachment 274017 [details] [review]
manager: don't leak session objects when client is rejected

if a client creates a transient reauthentication session and then we reject
the client when it tries to connect to it, then we need to clean up
the associated session object.

This commit does that.
Comment 3 Ray Strode [halfline] 2014-04-10 17:24:26 UTC
Created attachment 274018 [details] [review]
manager: be more accepting of callers with uids different from their session

If a user runs su in their session, that switched user will now be
running in a session that doesn't belong to it.  GDM won't allow a user
access to the worker process associated with the session in this case.
Instead, it will try to create a temporary just-in-time reauthentication
channel so reauthentication can happen without having the user talking to
another user's worker. Unfortunately, a logic error in the code means,
the user won't access to its own just-in-time channel.

This commit fixes that.
Comment 4 Ray Strode [halfline] 2014-04-10 17:24:42 UTC
Attachment 274016 [details] pushed as 559fa86 - session: introduce new client-rejected signal
Attachment 274017 [details] pushed as c7553e8 - manager: don't leak session objects when client is rejected
Attachment 274018 [details] pushed as 243ede3 - manager: be more accepting of callers with uids different from their session