systemd-inhibit authentication ignored by suspend request
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
xfce4-session (Ubuntu) |
Fix Released
|
Low
|
Unassigned |
Bug Description
xubuntu 16.04
I sometimes run a media server (MediaTomb) with systemd-inhibit to prevent shutdown or suspend from accidentally killing the server.
If I forget that the server is running and click on the xfce log out button and choose the suspend option, the system correctly puts up an authentication dialog saying:
"Authentication is required for suspending the system while an application asked to inhibit it"
HOWEVER if I dismiss the authentication request (press [Esc]) the system suspends anyway.
A secondary issue is that the authentication dialog shows BELOW the log out dialog (see screenshot).
I've marked it as a security issue because a request for authentication is being ignored but you may well feel it's not a serious issue (being able to suspend a system when you're not allowed to doesn't sound catastrophic!) in which case do downgrade it.
HTH, Peter
~$ lsb_release
LSB Version: core-9.
~$ apt-cache policy xfce4-power-manager
xfce4-power-
Installed: 1.4.4-4ubuntu2
~$ systemd-inhibit --list
Who: NetworkManager (UID 0/root, PID 2559/NetworkMan
What: sleep
Why: NetworkManager needs to turn off networks
Mode: delay
Who: mediatomb server (UID 0/root, PID 19323/systemd-
What: shutdown:
Why: Prevent shutdown of media server
Mode: block
Who: xfce4-power-manager (UID 1000/peter, PID 3902/xfce4-
What: handle-
Why: xfce4-power-manager handles these events
Mode: block
3 inhibitors listed.
ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: xfce4-power-manager 1.4.4-4ubuntu2
ProcVersionSign
Uname: Linux 4.4.0-34-generic x86_64
ApportVersion: 2.20.1-0ubuntu2.1
Architecture: amd64
CurrentDesktop: XFCE
Date: Mon Aug 22 12:49:04 2016
InstallationDate: Installed on 2016-05-12 (101 days ago)
InstallationMedia: Xubuntu 16.04 LTS "Xenial Xerus" - Release amd64 (20160420.1)
SourcePackage: xfce4-power-manager
UpgradeStatus: No upgrade log present (probably fresh install)
Changed in xfce4-power-manager (Ubuntu): | |
status: | New → Confirmed |
information type: | Private Security → Public Security |
Changed in xfce4-power-manager (Ubuntu): | |
importance: | Undecided → Low |
I was able to reproduce this bug (Ubuntu 16.04.1 + xfce). I used a test program rather than MediaTomb. When I tried to shutdown, I was presented an authentication popup as above and when I Esc'd out of it, I was logged out and the inhibited process was killed. The system did not shutdown.
Subscribing Xubuntu-developers, please have a look.