Mount USB Stick (Solved), SSHD (Solved), Root Logon (Still open)

jcci · 2009-10-30 06:06:57

Sorry this is about 3 problems:

1. Already for longer time I can not login as root on one computer on the console. This machine has no X as it is a server. Access via SSH and console logon as other user works. One logged on I can use SU or sudo for root actions. There was a similar thread over here, which didn't help.
/etc/securetty:

#
# /etc/securetty
#
console
tty/1
tty/2
tty/3
tty/4
tty/5
tty/6
# End of file

---------
Recent update related problems:

Updated files:

[2009-10-29 08:51] upgraded kernel-headers (2.6.30.5-1 -> 2.6.31.4-1)
[2009-10-29 08:51] Generating locales...
[2009-10-29 08:51] de_DE.UTF-8... done
[2009-10-29 08:51] de_DE.ISO-8859-1... done
[2009-10-29 08:51] de_DE.ISO-8859-15@euro... done
[2009-10-29 08:51] en_US.UTF-8... done
[2009-10-29 08:51] en_US.ISO-8859-1... done
[2009-10-29 08:51] zh_CN.UTF-8... done
[2009-10-29 08:51] zh_CN.GB2312... done
[2009-10-29 08:51] Generation complete.
[2009-10-29 08:51] upgraded glibc (2.10.1-4 -> 2.10.1-5)
[2009-10-29 08:51] upgraded binutils (2.19.1-5 -> 2.20-1)
[2009-10-29 08:51] upgraded gcc-libs (4.4.1-1 -> 4.4.2-2)
[2009-10-29 08:51] upgraded xulrunner (1.9.1.3-2 -> 1.9.1.4-1)
[2009-10-29 08:51] upgraded firefox (3.5.3-1 -> 3.5.4-1)
[2009-10-29 08:51] upgraded gcc (4.4.1-1 -> 4.4.2-2)
[2009-10-29 08:51] upgraded libatasmart (0.16-1 -> 0.17-1)
[2009-10-29 08:51] upgraded openntpd (3.9p1-7 -> 3.9p1-8)
[2009-10-29 08:52] Updating font cache... done.
[2009-10-29 08:52] installed ttf-freefont (20090104-2)
[2009-10-29 08:52] upgraded vlc (1.0.2-3 -> 1.0.2-4)

2. SSH logon does not work anymore. Another thread solved the proble by creating a /var/empty directory and restart sshd. This works, so the solution is confirmed.

3. Mount of USB media does not work as user although the user is in the storage group. In fact it worked before.
Mount as root by hand works, but in case of VFAT media without acl there is no way to access the media by user other than root.
Umount of course also need root rights in this case.
I'm using HAL and the message mentions "permission denied by policy"

Last edited by jcci (2009-10-31 04:23:33)

ajb · 2009-10-30 08:52:03

I've got some kind of problems with removable media too. My solution was to edit /etc/PolicyKit/PolicyKit.conf
I don't remember what i've changed there, so this is my file, maybe this will help:

<?xml version="1.0" encoding="UTF-8"?> <!-- -*- XML -*- -->

<!DOCTYPE pkconfig PUBLIC "-//freedesktop//DTD PolicyKit Configuration 1.0//EN"
"http://hal.freedesktop.org/releases/PolicyKit/1.0/config.dtd">

<!-- See the manual page PolicyKit.conf(5) for file format -->

<config version="0.1">
<match action="org.freedesktop.hal.storage.mount-removable">
<return result="yes" />
</match>
<match action="org.freedesktop.hal.storage.eject-removable">
<return result="yes" />
</match>
<match action="org.freedesktop.hal.storage.mount-fixed">
<return result="yes"/>
</match>
<match action="hal-storage-mount-fixed-extra-options">
<return result="yes"/>
</match>
<match action="hal-storage-mount-removable-extra-options">
<return result="yes"/>
</match>

</config>

jcci · 2009-10-31 04:22:50

Thank you, that did it!
Actually my PolicyKit.conf was almost empty. Anyway this shouldn't happen!

Anybody an idea about the root access?

ajb · 2009-10-31 12:29:11

Well, about the root try to find something related to PAM. Other ideas: not enough space on /root dir? is root shell working properly(bash or something else)? Try `su -`. is it working? Any other idea hasn't came to my mind.

R00KIE · 2009-10-31 14:35:32

You mean login via ssh as root? No can do until you allow it in the configuration of ssh but its a huge security risk.

ASOM · 2009-10-31 14:50:24

This is what I had to put in PolicyKit.conf to get everything working as it should. Of course replace your_user_name with your user.

<match user="your_user_name">
               <match action="org.freedesktop.hal.storage.*">
                       <return result="yes"/>
               </match>
               <match action="hal-storage-mount-fixed-extra-options">
                       <return result="yes" />
               </match>
               <match action="hal-storage-mount-removable-extra-options">
                       <return result="yes" />
               </match>
       </match>

EDIT: Having trouble with tabs, first line in code box should be tabbed.

Last edited by ASOM (2009-10-31 14:52:51)

jcci · 2009-11-01 03:03:28

The policy-kit modification from ajb already works well.

Concerning root access:
It is just about the login on i.e. TTY1, means sitting at the local machine and using the console - no login manager, no X.
SSH login, SU and SUDO work well. Login on TTY with any other user name than root also works. I found the same description of an error somewhere else in this forum, but everything suggested to be a solution was already right on my system. This must be related to the TTY security. If this would be PAM related ANY root login should fail; but SSH and SU work.
The console returns "wrong password" but of course the password is right as it works with the above commands. Disk space on the root dir is no issue.

R00KIE · 2009-11-01 11:33:17

Try to login with another user and then login as root, then try to change the root password and try again, maybe something will get updated and solve the problem. No other ideas here.

Edit: Typo

Last edited by R00KIE (2009-11-01 11:33:34)

Arch Linux

#1 2009-10-30 06:06:57

Mount USB Stick (Solved), SSHD (Solved), Root Logon (Still open)

#2 2009-10-30 08:52:03

Re: Mount USB Stick (Solved), SSHD (Solved), Root Logon (Still open)

#3 2009-10-31 04:22:50

Re: Mount USB Stick (Solved), SSHD (Solved), Root Logon (Still open)

#4 2009-10-31 12:29:11

Re: Mount USB Stick (Solved), SSHD (Solved), Root Logon (Still open)

#5 2009-10-31 14:35:32

Re: Mount USB Stick (Solved), SSHD (Solved), Root Logon (Still open)

#6 2009-10-31 14:50:24

Re: Mount USB Stick (Solved), SSHD (Solved), Root Logon (Still open)

#7 2009-11-01 03:03:28

Re: Mount USB Stick (Solved), SSHD (Solved), Root Logon (Still open)

#8 2009-11-01 11:33:17

Re: Mount USB Stick (Solved), SSHD (Solved), Root Logon (Still open)

Board footer