Software Sources/software-properties-qt privilege escalation not accepting password

Bug #1964401 reported by Brent Gervais
52
This bug affects 11 people
Affects Status Importance Assigned to Milestone
plasma-discover (Ubuntu)
Confirmed
Undecided
Unassigned
software-properties (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

1) lsb_release -rd
Description: Ubuntu Jammy Jellyfish (development branch)
Release: 22.04

2) package version - apt-cache policy pkgname'

plasma-discover:
  Installed: 5.24.2.1-0ubuntu1

software-properties-qt:
  Installed: 0.99.19

3) expected to happen
* In Discover: Settings > Software Sources
* opens a privilege escalation dialogue
* enter user password
* software-properties-qt opens

4) happened instead
* In Discover: Settings > Software Sources
* opens a privilege escalation dialogue
* insert known-correct user password
* **does not accept known-correct user password**

# Additional Info
Note: described behaviour is for a post 20.04->22.04 devel daily upgrade found during a QA Testcase. Behaviour exists, but has slightly different symptoms in a virgin live 22.04 daily session (see below)

* launching from terminal works as expected
sudo software-properties-qt

## process & errors - post 20.04->22.04 devel daily upgrade
* running Discover from terminal
 $ plasma-discover

* Settings > Software Sources
gives error on terminal:
> org.kde.kdesu: Daemon not safe (not sgid), not using it.

* insert known-correct user password
gives error on terminal:
> kf.su: [ ./src/stubprocess.cpp : 225 ] Unknown request: "stop"
> end

* close password window
gives error on terminal

> Usage: /usr/lib/x86_64-linux-gnu/libexec/kf5/kdesu [options] command
> Runs a program with elevated privileges.

> Options:
> -h, --help Displays help on commandline options.
> [...]

## process & errors - live Kubuntu 22.04 daily

similar behaviour, hoever password-asking window never appears. Terminal errors differ from above:

* Settings > Software Sources
gives error on terminal:
> org.kde.kdesu: Daemon not safe (not sgid), not using it.
>
> Don't need password!!
>
>kf.su: [./src/stubprocess.cpp : 255 ] Unknown request: "ok"
---
ProblemType: Bug
ApportVersion: 2.20.11-0ubuntu78
Architecture: amd64
CasperMD5CheckResult: unknown
CurrentDesktop: KDE
DistroRelease: Ubuntu 22.04
InstallationDate: Installed on 2022-03-07 (2 days ago)
InstallationMedia: Kubuntu 20.04.3 LTS "Focal Fossa" - Release amd64 (20210819.1)
Package: plasma-discover 5.24.2.1-0ubuntu1
PackageArchitecture: amd64
ProcVersionSignature: Ubuntu 5.15.0-18.18-generic 5.15.12
Tags: jammy third-party-packages
Uname: Linux 5.15.0-18-generic x86_64
UpgradeStatus: Upgraded to jammy on 2022-03-07 (2 days ago)
UserGroups: adm cdrom dip lpadmin lxd plugdev sambashare sudo
_MarkForUpload: True

Revision history for this message
Brent Gervais (gerbrent) wrote :
Revision history for this message
Brent Gervais (gerbrent) wrote :
Revision history for this message
Brent Gervais (gerbrent) wrote :
Revision history for this message
Brent Gervais (gerbrent) wrote :

(post 20.04->22.04 devel daily upgrade) run-as-root window - not accepting password w terminal errors

Revision history for this message
Brent Gervais (gerbrent) wrote :

(post 20.04->22.04 devel daily upgrade) run-as-root window - not accepting password w terminal errors

Revision history for this message
Brent Gervais (gerbrent) wrote :

(post 20.04->22.04 devel daily upgrade) run-as-root window - not accepting password w terminal errors

Revision history for this message
Brent Gervais (gerbrent) wrote :
Revision history for this message
Brent Gervais (gerbrent) wrote :

(apologies for the attachment duplicates - there must be a bug in Launchpad when editing an attachment's description........)

Revision history for this message
Ubuntu QA Website (ubuntuqa) wrote :

This bug has been reported on the Ubuntu ISO testing tracker.

A list of all reports related to this bug can be found here:
http://iso.qa.ubuntu.com/qatracker/reports/bugs/1964401

tags: added: iso-testing
Revision history for this message
Brent Gervais (gerbrent) wrote : Dependencies.txt

apport information

tags: added: apport-collected third-party-packages
description: updated
Revision history for this message
Brent Gervais (gerbrent) wrote : ProcCpuinfoMinimal.txt

apport information

Revision history for this message
Brent Gervais (gerbrent) wrote : ProcEnviron.txt

apport information

Brent Gervais (gerbrent)
tags: added: kubuntu
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in plasma-discover (Ubuntu):
status: New → Confirmed
no longer affects: software-properties (Ubuntu)
Revision history for this message
Jan Rathmann (kaiserclaudius) wrote :

Can reproduce when booting kubuntu-22.04-desktop-amd64.iso in Virtualbox and on my main installation of Kubuntu 22.04.

Happens both on X11 and Wayland session.

When I try to go to software-sources via Discover or Muon on the live image (where no user password is set), it simply doesn't launch.

Terminal output of 'pkexec software-properties-qt':

qt.qpa.xcb: could not connect to display
qt.qpa.plugin: Could not load the Qt platform plugin "xcb" in "" even though it was found.
This application failed to start because no Qt platform plugin could be initialized. Reinstalling the application may fix this problem.

Available platform plugins are: eglfs, linuxfb, minimal, minimalegl, offscreen, vnc, wayland-egl, wayland, wayland-xcomposite-egl, wayland-xcomposite-glx, xcb.

Aborted (core dumped)

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in software-properties (Ubuntu):
status: New → Confirmed
Revision history for this message
DR. VIMAL HURRY (vhurry200) wrote :

I'm having the same problem on both my desktop & laptop running Kubuntu 22.04. Sudo muon e.g. gets the job done (to change software sources) but it is very irritating that the dialog box won't accept my password. I never had this problem on Kubuntu 21.10. Please fix this bug as soon as possible. Thanks!

To post a comment you must log in.