Package: xrdp Version: 0.9.21.1-1 Severity: normal X-Debbugs-Cc: hibbsncc1701@gmail.com Dear Maintainer, Attempting to use the nm-applet in a remote xrdp session under xfce causes polkit to demand authentication for wifi-scanning. After successful authentication, the menu appears but polkit again attempts to ask for authentication to initiate wifi scans. This time however, the nm-applet menu is still present, unusable, and cannot be dismissed. The polkit pop-up is also present, but similarly cannot be interacted with nor dismissed by the user. Because neither nm-applet's menu nor polkit's pop-up can be dismissed the desktop is unusable. None of the menus work. Nor does the desktop icons. Alt-F4 fails to close anything. As this is a remote RDP session, the console cannot be switched to with Ctrl-Alt-F[1-6], and disconnecting then reconnecting to the RDP session just drops the user back into the broken desktop. Ultimately, the user is stuck until the nm-applet menu times out and closes automatically. (Seems to be around 5-10 minutes. As I got to typing the start of this paragraph in reportbug before it finally closed...) Attempting to cancel authentication after the timeout just makes polkit prompt again indefinitely. (Which will retrigger the bug if authentication is successful.) The polkit permission that is broken seems to be: org.freedesktop.NetworkManager.wifi.scan Adding a polkit rules file under /etc/polkit-1/rules.d similar to the one for the color-manager bug, fixes the issue. (See attachment.) Ideally, the remote RDP session shouldn't need control over the network connections, but as the nm-applet is common functionality for users, it should at least fail gracefully and not continuously reprompt the user if a polkit authentication attempt is successful. -- System Information: Debian Release: 12.1 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable'), (400, 'oldstable-updates'), (400, 'oldstable-security'), (400, 'stable'), (400, 'oldstable'), (100, 'bookworm-fasttrack'), (100, 'bookworm-backports-staging') Architecture: amd64 (x86_64) Foreign Architectures: i386, arm64 Kernel: Linux 5.10.0-23-amd64 (SMP w/4 CPU threads) Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages xrdp depends on: ii adduser 3.134 ii init-system-helpers 1.65.2 ii libc6 2.36-9+deb12u1 ii libfuse2 2.9.9-6+b1 ii libjpeg62-turbo 1:2.1.5-2 ii libopus0 1.3.1-3 ii libpam0g 1.5.2-6 ii libssl1.1 1.1.1n-0+deb11u5 ii libssl3 3.0.9-1 ii libx11-6 2:1.8.4-2+deb12u1 ii libxfixes3 1:6.0.0-2 ii libxrandr2 2:1.5.2-2+b1 ii lsb-base 11.6 ii ssl-cert 1.1.2 ii sysvinit-utils [lsb-base] 3.06-4 Versions of packages xrdp recommends: ii fuse3 [fuse] 3.14.0-4 pn xorgxrdp <none> Versions of packages xrdp suggests: pn guacamole <none> pn xrdp-pulseaudio-installer <none>
Attachment:
02-xrdp-nm-applet.rules
Description: application/javascript