Polkit pkla规则在18.04不起作用
我对Gnome 3.28.1上臭名昭着的colord政策提示感到麻烦。 在同一系统上使用XFCE桌面我没有这样的问题。
我通过xrdp工作并始终得到此提示 ，我无法禁用它。
每当我将/usr/share/polkit-1/actions/org.freedesktop.color.policy中的 策略更改为yes我在日志中收到Gnome致命错误。
WinEunuuchs2Unix建议后更新日志：
gsd-media-keys[1099]: Unable to inhibit keypresses: GDBus.Error:org.freedesktop.DBus.Error.AccessDenied: Permission denied gsd-sharing[1059]: Failed to StopUnit service: GDBus.Error:org.freedesktop.systemd1.NoSuchUnit: Unit gnome-user-share-webdav.service not loaded. gsd-sharing[1059]: Failed to StopUnit service: GDBus.Error:org.freedesktop.systemd1.NoSuchUnit: Unit rygel.service not loaded. gsd-sharing[1059]: Failed to StopUnit service: GDBus.Error:org.freedesktop.systemd1.NoSuchUnit: Unit gnome-remote-desktop.service not loaded. gsd-sharing[1059]: Failed to StopUnit service: GDBus.Error:org.freedesktop.systemd1.NoSuchUnit: Unit vino-server.service not loaded. gnome-session-binary[877]: Entering running state dbus-daemon[867]: [session uid=1000 pid=867] Successfully activated service 'org.gnome.evolution.dataserver.Calendar7' systemd[847]: Started Evolution calendar service. dbus-daemon[867]: [session uid=1000 pid=867] Activating service name='ca.desrt.dconf' requested by ':1.56' (uid=1000 pid=1176 comm="/usr/lib/evolution/evolution-calendar-factory-subp" label="unconfined") dbus-daemon[867]: [session uid=1000 pid=867] Activating via systemd: service name='org.gnome.evolution.dataserver.AddressBook9' unit='evolution-addressbook-factory.service' requested by ':1.56' (uid=1000 pid=1176 comm="/usr/lib/evolution/evolution-calendar-factory-subp" label="unconfined") systemd[847]: Starting Evolution address book service... dbus-daemon[867]: [session uid=1000 pid=867] Successfully activated service 'ca.desrt.dconf' dbus-daemon[867]: [session uid=1000 pid=867] Successfully activated service 'org.gnome.evolution.dataserver.AddressBook9' systemd[847]: Started Evolution address book service. gnome-shell[922]: Error looking up permission: GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name org.freedesktop.impl.portal.PermissionStore was not provided by any .service files kerneloops-appl[1152]: Failed to load module "canberra-gtk-module" gsd-color[1088]: failed to get edid: unable to get EDID for output colord[1140]: failed to get seat for session c1 [pid 1088]: No data available gnome-shell[922]: GDBus.Error:org.freedesktop.DBus.Error.NoReply: Message recipient disconnected from message bus without replying gsd-color[1088]: unable to get EDID for xrandr-rdp0: unable to get EDID for output kernel: [ 213.817502] do_trap: 20 callbacks suppressed kernel: [ 213.817504] traps: gsd-color[1088] trap divide error ip:5592b1f5c94a sp:7fffbcc03a90 error:0 in gsd-color[5592b1f53000+12000] gnome-shell[922]: Could not get current seat: No data available gnome-shell[922]: GNOME Shell started at Mon May 21 2018 12:06:54 GMT+0300 (EEST) gnome-session[877]: gnome-session-binary[877]: WARNING: Application 'org.gnome.SettingsDaemon.Color.desktop' killed by signal 8 gnome-session-binary[877]: WARNING: Application 'org.gnome.SettingsDaemon.Color.desktop' killed by signal 8 gsd-color[1240]: failed to get edid: unable to get EDID for output colord[1140]: failed to get seat for session c1 [pid 1240]: No data available gsd-color[1240]: unable to get EDID for xrandr-rdp0: unable to get EDID for output kernel: [ 220.142162] traps: gsd-color[1240] trap divide error ip:55c79912d94a sp:7ffcbd6a6020 error:0 in gsd-color[55c799124000+12000] gnome-session[877]: gnome-session-binary[877]: WARNING: App 'org.gnome.SettingsDaemon.Color.desktop' respawning too quickly gnome-session-binary[877]: WARNING: App 'org.gnome.SettingsDaemon.Color.desktop' respawning too quickly gnome-session-binary[877]: Unrecoverable failure in required component org.gnome.SettingsDaemon.Color.desktop gnome-session[877]: gnome-session-binary[877]: CRITICAL: We failed, but the fail whale is dead. Sorry.... gnome-session-binary[877]: CRITICAL: We failed, but the fail whale is dead. Sorry.... xrdp-sesman[846]: (846)(140561311482944)[CORE ] window manager (pid 859) did exit, cleaning up session xrdp-sesman[846]: (846)(140561311482944)[INFO ] calling auth_stop_session and auth_end from pid 846 xrdp-sesman[846]: (846)(140561311482944)[DEBUG] cleanup_sockets: xrdp-sesman[846]: (846)(140561311482944)[DEBUG] cleanup_sockets: deleting /tmp/.xrdp/xrdp_chansrv_audio_out_socket_10 xrdp-sesman[846]: (846)(140561311482944)[DEBUG] cleanup_sockets: deleting /tmp/.xrdp/xrdp_chansrv_audio_in_socket_10 xrdp-sesman[846]: (846)(140561311482944)[DEBUG] cleanup_sockets: deleting /tmp/.xrdp/xrdpapi_10 xrdp-sesman[621]: (621)(140561311482944)[INFO ] ++ terminated session: username xoob, display :10.0, session_pid 846, ip 192.168.1.100:7137 - socket: 12 xrdp[844]: (844)(140711347752192)[DEBUG] Closed socket 26 (AF_UNIX) at-spi-bus-launcher[884]: XIO: fatal IO error 11 (Resource temporarily unavailable) on X server ":10.0" at-spi-bus-launcher[884]: after 23 requests (23 known processed) with 0 events remaining. kernel: [ 221.144168] gnome-shell[922]: segfault at 10 ip 00007fd88cb3712f sp 00007fff690fcac0 error 4 in libmutter-2.so.0.0.0[7fd88ca73000+156000] gsd-power[1051]: gsd-power: Fatal IO error 11 (Resource temporarily unavailable) on X server :10.0. gsd-xsettings[1069]: gsd-xsettings: Fatal IO error 11 (Resource temporarily unavailable) on X server :10.0. gsd-wacom[1075]: gsd-wacom: Fatal IO error 11 (Resource temporarily unavailable) on X server :10.0. gsd-clipboard[1084]: gsd-clipboard: Fatal IO error 11 (Resource temporarily unavailable) on X server :10.0. gsd-media-keys[1099]: gsd-media-keys: Fatal IO error 11 (Resource temporarily unavailable) on X server :10.0. gsd-keyboard[1093]: gsd-keyboard: Fatal IO error 11 (Resource temporarily unavailable) on X server :10.0. kerneloops-applet.desktop[1152]: kerneloops-applet: Fatal IO error 11 (Resource temporarily unavailable) on X server :10.0. conky.desktop[1150]: XIO: fatal IO error 11 (Resource temporarily unavailable) on X server ":10.0" conky.desktop[1150]: after 578 requests (578 known processed) with 0 events remaining. xrdp[844]: (844)(140711347752192)[DEBUG] Closed socket 12 (AF_INET 192.168.1.201:7777) xrdp[844]: (844)(140711347752192)[DEBUG] xrdp_mm_module_cleanup xrdp[844]: (844)(140711347752192)[DEBUG] Closed socket 25 (AF_UNIX)
如果我只是尝试以密码提示交互式登录，也会发生同样的情况。
我试图在/var/lib/polkit-1/localauthority/50-local.d创建自定义pkla文件：
Create a color managed device Authentication is required to create a color managed device yes yes yes
在我看来，它等同于直接改变动作是/usr/share/polkit-1/actions 。
我还尝试根据此提议创建全局允许pkla规则：
[No password prompt] Identity=unix-group:sudo Action=* ResultActive=yes
我在/etc/polkit-1/rules.d中也有全局规则
polkit.addRule(function(action, subject) { if (subject.isInGroup("group")) { return polkit.Result.YES; } });
当我得到它时，如果我有polkit <0.106，则不处理规则，并且应该使用pkla文件。 如我错了请纠正我。 我的pkaction --version显示0.105 。
以上都没有奏效。 我应该尝试哪些步骤以及如何调试它？
在Stack Exchange中，我发现了这个可能有用的错误修复。
更具体地说，您必须放入.rules文件
/etc/polkit-1/rules.d/
（选择文件名并只提供.rules扩展名）
并给出规则：
polkit.addRule(function(action, subject) { if ((action.id == "org.freedesktop.color-manager.create-device" || action.id == "org.freedesktop.color-manager.create-profile" || action.id == "org.freedesktop.color-manager.delete-device" || action.id == "org.freedesktop.color-manager.delete-profile" || action.id == "org.freedesktop.color-manager.modify-device" || action.id == "org.freedesktop.color-manager.modify-profile") && subject.isInGroup("ATTENTION")) { return polkit.Result.YES; } });
然后，您必须将“注意”一词替换为您的用户组。
请参阅链接以获取更多信息以及要遵循的其他链接。
原帖在下面
您的系统日志显示gnome-keyring错误。 基于此问答，解决这些错误可能是您的政策工具包问题的关键：引用政策工具包的Gnome-keyring登录问题 。
谷歌搜索您的具体错误消息：
couldn't access control socket: /run/user/1000/keyring/control: No such file or directory
返回很多结果：
- 为什么我从Xubuntu的Gnome密钥环中收到此警告？
- 来自ArchLinux： Gnome Keyring无法正常工作
- 来自Debian： 未能提供秘密
在这三个链接之间，您应该找到足够的信息来修复gnome-keyring错误。 这反过来应该是解决政策工具包问题的先兆。
该问题与单入口伽马斜坡的错误传递有关，而不是256入口伽马斜坡。 该错误已在xorgxrdp版本0.2.6中修复。