Arch Linux

seth

Member

Registered: 2012-09-03

Posts: 51,560

Re: Nightlight NOT working...

What if you add

ReadWritePaths=/var/lib/colord

or maybe

ReadWritePaths=/var/lib

and with what UID/GID is colord running for you?

sudo ls -l /proc/$(pidof colord)/fd

---

How to upload text · How to boot w/o GUI · Disable Windows Fast-Start! · Fix your xinitrc

lenhuppe

Member

From: New Hampshire USA

Registered: 2018-12-10

Posts: 272

Website

Re: Nightlight NOT working...

What if you add

ReadWritePaths=/var/lib/colord

or maybe

ReadWritePaths=/var/lib

and with what UID/GID is colord running for you?

sudo ls -l /proc/$(pidof colord)/fd

That did the trick ...

I did a fresh installation of Gnome and then edited the colord service file before rebooting.

colord.service

[Unit]
Description=Manage, Install and Generate Color Profiles

[Service]
Type=dbus
BusName=org.freedesktop.ColorManager
ExecStart=/usr/lib/colord
User=colord
PrivateTmp=yes
ProtectSystem=strict
ReadWritePaths=/var/lib/colord
ProtectHome=true
ProtectHostname=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectKernelLogs=true
ProtectControlGroups=true
RestrictRealtime=true
RestrictAddressFamilies=AF_UNIX

# drop all capabilities
CapabilityBoundingSet=~CAP_SETUID CAP_SETGID CAP_SETPCAP CAP_SYS_ADMIN CAP_SYS_PTRACE CAP_CHOWN CAP_FSETID CAP_SETFCAP CAP_DAC_OVERRIDE CAP_DAC_READ_SEARCH CAP_FOWNER CAP_IPC_OWNER CAP_NET_ADMIN CAP_SYS_RAWIO CAP_SYS_TIME CAP_AUDIT_CONTROL CAP_AUDIT_READ CAP_AUDIT_WRITE CAP_KILL CAP_MKNOD CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYS_RESOURCE CAP_MAC_ADMIN CAP_MAC_OVERRIDE CAP_SYS_BOOT CAP_LINUX_IMMUTABLE CAP_IPC_LOCK CAP_SYS_CHROOT CAP_BLOCK_SUSPEND CAP_LEASE CAP_SYS_PACCT CAP_SYS_TTY_CONFIG CAP_WAKE_ALARM

NoNewPrivileges=true
PrivateUsers=true
ProtectProc=invisible
ProcSubset=pid
RestrictSUIDSGID=true
SystemCallArchitectures=native

RestrictNamespaces=~cgroup user pid net uts mnt ipc

LockPersonality=true
MemoryDenyWriteExecute=true
RemoveIPC=true

Upon first boot, I got the following:

systemctl status colord.service

● colord.service - Manage, Install and Generate Color Profiles
     Loaded: loaded (/usr/lib/systemd/system/colord.service; static)
     Active: active (running) since Wed 2024-01-31 10:48:53 EST; 58s ago
   Main PID: 639 (colord)
      Tasks: 4 (limit: 37596)
     Memory: 48.6M (peak: 64.1M)
        CPU: 240ms
     CGroup: /system.slice/colord.service
             └─639 /usr/lib/colord

Jan 31 10:48:53 lurch systemd[1]: Starting Manage, Install and Generate Color Profiles...
Jan 31 10:48:53 lurch systemd[1]: Started Manage, Install and Generate Color Profiles.

The command you requested ran as follows:

sudo ls -l /proc/$(pidof colord)/fd

total 0
lr-x------ 1 colord colord 64 Jan 31 11:16 0 -> /dev/null
lrwx------ 1 colord colord 64 Jan 31 11:16 1 -> 'socket:[9465]'=
lrwx------ 1 colord colord 64 Jan 31 11:19 10 -> 'anon_inode:[eventfd]'
lrwx------ 1 colord colord 64 Jan 31 11:16 2 -> 'socket:[9465]'=
lrwx------ 1 colord colord 64 Jan 31 11:16 3 -> 'anon_inode:[eventfd]'
lrwx------ 1 colord colord 64 Jan 31 11:16 4 -> /var/lib/colord/mapping.db
lrwx------ 1 colord colord 64 Jan 31 11:19 5 -> /var/lib/colord/storage.db
lrwx------ 1 colord colord 64 Jan 31 11:19 6 -> /var/lib/colord/storage.db
lrwx------ 1 colord colord 64 Jan 31 11:19 7 -> 'anon_inode:[eventfd]'
lr-x------ 1 colord colord 64 Jan 31 11:19 8 -> anon_inode:inotify
lrwx------ 1 colord colord 64 Jan 31 11:19 9 -> 'socket:[19565]'=

---

Why do we drive on the parkway and then park in the driveway?

seth

Member

Registered: 2012-09-03

Posts: 51,560

Re: Nightlight NOT working...

Coda: https://github.com/hughsie/colord/issues/166 & https://github.com/hughsie/colord/commi … 823df56276

Please always remember to mark resolved threads by editing your initial posts subject - so others will know that there's no task left, but maybe a solution to find.
Thanks.

---

How to upload text · How to boot w/o GUI · Disable Windows Fast-Start! · Fix your xinitrc