Arch Linux

Alonzo Gomez

Member

Registered: 2016-12-02

Posts: 10

GUFW start problem

Hello.

Using Arch X86-64 up to date.  Gnome 3, with GDM.  UFW works fine.

Logging in (GDM) gives 3 choices:
- Gnome
- Gnome classic
- Gnome with xorg

If I log in as using the option "Gnome with xorg" at GDM, GUFW works fine.

But, if I log in choosing either "Gnome" or "Gnome classic", GUFW will
not start.  Instead, whether I click the gui icon, or do "gufw" or
"sudo gufw" in a terminal, the authentication dialog box appears
asking for the password.  After entering the password, the dialog box
disappears, and nothing further happens.

This is regardless of whether I use Linux, Linux-lts, or Linux-grsec.

Fwiw, I do have net-tools and python-gobject both installed.
Python-gi does not seem to be in the repos.

If necessary, I can reboot into either Gnome or Gnome classic, try
GUFW again, and post whatever error messages would be helpful.

BTW, no other application program exhibit this behavior.

jasonwryan

Anarchist

From: .nz

Registered: 2009-05-09

Posts: 30,424

Website

Re: GUFW start problem

https://bugs.archlinux.org/task/52599

---

Arch + dwm   •   Mercurial repos  •   Surfraw

Registered Linux User #482438

Alonzo Gomez

Member

Registered: 2016-12-02

Posts: 10

Re: GUFW start problem

So there is a bug report filed (FS#52599 - [gufw] does not start ).  Thanks for the pointer. 

Yep, I have almost exactly the same symptoms as shown in the original bug report by Marcelo Segura (LordTiva).  So no additional bug report would seem to be needed.  I don't know if my information is either needed or even wanted as an addition to the existing bug report.  And if so, I don't know the proper way to add it.  So I guess I'll just watch the existing report.

uncarvedblock

Member

Registered: 2016-11-03

Posts: 4

Re: GUFW start problem

I've been able to open GUFW under a GNOME session after giving localuser:root access to my x-session:

xhost +SI:localuser:root

Last edited by uncarvedblock (2017-01-30 16:14:06)

Alonzo Gomez

Member

Registered: 2016-12-02

Posts: 10

Re: GUFW start problem

Yes,
xhost +SI:localuser:root
does work here in Wayland.  But only until I reboot, then it reverts to not working.   

And I am really concerned about this, from the Arch wiki "xhost" aricle:
"Warning: This command disables access control, meaning that any user on the system, or on your network if X is listening on the network, has access to your $DISPLAY without any authentication. This opens a security hole on your system that allows other users to launch applications (including key loggers) on your X server."

I'm not even sure if that refers only to:
xhost + >/dev/null
or (also) to:
xhost +
xhost +local:
xhost +SI:localuser:root
etc.

Finally, entering:
xhost
always returns (at least):
SI:localuser:moron
I hope that is supposed to happen.

Stewart Little

Member

From: England, UK

Registered: 2017-01-18

Posts: 120

Re: GUFW start problem

Have you tried placing

xhost +SI:localuser:root

Into the ~/.bashrc file? It might then remember the settings....

---

“Great minds discuss ideas; average minds discuss events; small minds discuss people.” -Eleanor Roosevelt
“It is our choices, that show what we truly are, far more than our abilities.” -J. K Rowling
-----
How to Ask Questions the Smart Way

Alonzo Gomez

Member

Registered: 2016-12-02

Posts: 10

Re: GUFW start problem

Stewart,

Yes, that does work.  Thank you.

But, again, I am concerned about this, from the Arch wiki "xhost" aricle:
"Warning: This command disables access control, meaning that any user on the system, or on your network if X is listening on the network, has access to your $DISPLAY without any authentication. This opens a security hole on your system that allows other users to launch applications (including key loggers) on your X server."

BTW,  I noticed that you just recently registered with the Arch forum, 2017-01-18. 
Welcome.

uncarvedblock

Member

Registered: 2016-11-03

Posts: 4

Re: GUFW start problem

Stewart,

Yes, that does work.  Thank you.

But, again, I am concerned about this, from the Arch wiki "xhost" aricle:
"Warning: This command disables access control, meaning that any user on the system, or on your network if X is listening on the network, has access to your $DISPLAY without any authentication. This opens a security hole on your system that allows other users to launch applications (including key loggers) on your X server."

BTW,  I noticed that you just recently registered with the Arch forum, 2017-01-18. 
Welcome.

My understanding is, and someone please correct me if I'm wrong, that:

xhost +SI:localuser:root

will only allow the root user on the local machine to access your x-session. If someone (or another program) gains local root access with malicious intent, you have bigger problems than just your user x-session being compromised.

EDIT:

Finally, entering:
xhost
always returns (at least):
SI:localuser:moron
I hope that is supposed to happen.

That's only a problem if your username isn't "moron"

Last edited by uncarvedblock (2017-02-01 18:24:12)

Alonzo Gomez

Member

Registered: 2016-12-02

Posts: 10

Re: GUFW start problem

Hello uncarvedblock.
Thanks for the information.