Polkit errors: not authorized

I cant do anything anymore and have no idea why. My user is in wheel, and I use /bin/bash as shell.

I cant even to these tasks as root, as root is not allowed to do them. There is something seriously broken.

Reason before (already resolved)

The first reason was changing it back to /usr/bin/bash as I thought that was the right one. The result was that my $DISPLAY couldnt connect, X11 for some reason still worked but Wayland crashed.

So I was nearly going insane but found the reason, changed the shell to /bin/bash and it worked.

Now I got the same thing again??

Whats happening now

I had the same thing, just when I was changing my KDE window decorations to Willow-dark (as Aurorae themes were fixed and I wanted to try it) my session crashed.

I was thrown out to SDDM, tried logging in to Wayland, same error again “Could not connect to $DISPLAY” e.g. (X11 again works, using it)

The thing is, now my shell was /bin/bash ! I also tried changing it to /bin/fish as this didnt give any errors before too, still doesnt work.

What I did

I have no idea

  • I created some polkit-accept rules for mounting and unlocking LUKS drives and starting virt-manager, as well as running KDE-Partitionmanager. I noticed that partitionmanager was no longer working so I removed that rule (moved the file from /etc/polkit-1/rules.d/ to /var/home/$USER) and restarted the app, still same errors.

example

polkit.addRule(function(action, subject) {
  if (action.id == "org.freedesktop.udisks2.encrypted-unlock-system" && subject.local && subject.active && subject.isInGroup("wheel")) {
      return polkit.Result.YES;
  }
});

Also adding the polkit exceptions didnt create an issue before, this makes no sense. I used it for a few days without problems.

I tried changing my shell to fish and rebooted lots of times, no changes. My shell now is /bin/bash

I also removed all the polkit rules, still cant mount any LUKS drives, get “error not permitted” in Dolphin. Normally mounting them should invoke the polkit prompt?

Occuring errors

starting wayland with startplasma-wayland

Error: could not determine $DISPLAY.
Error: Can not contacr kdeinit5!
org.kde.startup: "kdeinit5_shutdown" () exited with code 255
startplasma-wayland: Shutting down...
startplasmacompositor: Shutting down...
startplasmacompositor: Done.

Trying to change the user shell to /bin/bash (echo $SHELL shows I am using it and root does too)

[user@fedora user]$ sudo usermod -s /bin/bash $USER
Poorly the user cant execute »/usr/sbin/usermod -s /bin/bash user« as root on fedora.

[user@fedora user]$ echo $SHELL
/bin/bash

[root@fedora user]# echo $SHELL
/bin/bash

Anyone knowing what to do?

/var/home/user ❯❯❯ cat /etc/passwd                                                                                                                                                               
root:x:0:0:root:/root:/bin/bash
user:x:1000:1000:user:/home/user:/bin/fish

Another thing I see is when using bash with sudo I have to enter the password every time. Maybe this is because I get the same “poorly root cant execute that” error as above

So this is seriously problematic. I have no idea how it happened, as everything was working normally and now its not anymore.

I had no idea what you cant do without any privileges. I can open apps and save files thats it.

Not even root can update flatpaks. I cant change my shell, I cant mount drives, open KDE-Partitionmanager, Virt-manager does no connection, I cant open certain /etc/ locations even as root

You can start with this:
How to Reset the root Password :: Fedora Docs

Then use su to log in as root and continue troubleshooting.

sudo -i works normally.

Let’s check the output to isolate the problem:

id; getent group wheel
su - -c 'rpm -V -a sudo polkit\*'
su - -c 'rpm -q -f $(find /etc/sudo* /etc/polkit*) | sort -u'

So for some reason my user was not in wheel anymore? I cant explain how that happened.

uid=1000(user) gid=1000(user) Gruppen=1000(user),10(wheel),1002(plugdev) Kontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
wheel:x:10:user

This is the output now, after logging in as root and doing usermod -aG wheel user and usermod -aG plugdev user. I also did this with flatpak libvirt qemu but they didnt appear for some reason.

Still when trying to mount a LUKS drive I get the error “not permitted”.

I logged out of the root session into tty and logged in as user, couldnt start Wayland (Could not connect to $DISPLAY) and kinit5 (exit code 255) so used X11.

[root@fedora user]# su - -c 'rpm -V -a sudo polkit\*'
.......T.    /usr/lib64/girepository-1.0/Polkit-1.0.typelib
.......T.    /usr/lib64/girepository-1.0/PolkitAgent-1.0.typelib
.......T.    /usr/lib64/libpolkit-agent-1.so.0.0.0
.......T.    /usr/lib64/libpolkit-gobject-1.so.0.0.0
.......T.    /etc/pam.d/polkit-1
.......T.    /etc/polkit-1/rules.d/50-default.rules
.......T.    /usr/bin/pkaction
.......T.    /usr/bin/pkcheck
.......T.    /usr/bin/pkexec
.......T.    /usr/bin/pkttyagent
.......T.    /usr/lib/polkit-1/polkit-agent-helper-1
.......T.    /usr/lib/polkit-1/polkitd
.......T.    /usr/lib/systemd/system/polkit.service
.......T.    /usr/share/dbus-1/system-services/org.freedesktop.PolicyKit1.service
.......T.    /usr/share/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
.......T.  d /usr/share/doc/polkit/COPYING
.......T.  d /usr/share/doc/polkit/NEWS.md
.......T.  d /usr/share/doc/polkit/README.md
.......T.    /usr/share/locale/cs/LC_MESSAGES/polkit-1.mo
.......T.    /usr/share/locale/da/LC_MESSAGES/polkit-1.mo
.......T.    /usr/share/locale/de/LC_MESSAGES/polkit-1.mo
.......T.    /usr/share/locale/hr/LC_MESSAGES/polkit-1.mo
.......T.    /usr/share/locale/hu/LC_MESSAGES/polkit-1.mo
.......T.    /usr/share/locale/id/LC_MESSAGES/polkit-1.mo
.......T.    /usr/share/locale/it/LC_MESSAGES/polkit-1.mo
.......T.    /usr/share/locale/nl/LC_MESSAGES/polkit-1.mo
.......T.    /usr/share/locale/nn/LC_MESSAGES/polkit-1.mo
.......T.    /usr/share/locale/pl/LC_MESSAGES/polkit-1.mo
.......T.    /usr/share/locale/pt/LC_MESSAGES/polkit-1.mo
.......T.    /usr/share/locale/pt_BR/LC_MESSAGES/polkit-1.mo
.......T.    /usr/share/locale/ro/LC_MESSAGES/polkit-1.mo
.......T.    /usr/share/locale/sk/LC_MESSAGES/polkit-1.mo
.......T.    /usr/share/locale/sv/LC_MESSAGES/polkit-1.mo
.......T.    /usr/share/locale/tr/LC_MESSAGES/polkit-1.mo
.......T.    /usr/share/locale/uk/LC_MESSAGES/polkit-1.mo
.......T.    /usr/share/locale/zh_CN/LC_MESSAGES/polkit-1.mo
.......T.    /usr/share/locale/zh_TW/LC_MESSAGES/polkit-1.mo
.......T.  d /usr/share/man/man1/pkaction.1.gz
.......T.  d /usr/share/man/man1/pkcheck.1.gz
.......T.  d /usr/share/man/man1/pkexec.1.gz
.......T.  d /usr/share/man/man1/pkttyagent.1.gz
.......T.  d /usr/share/man/man8/polkit.8.gz
.......T.  d /usr/share/man/man8/polkitd.8.gz
.......T.    /usr/share/polkit-1/actions/org.freedesktop.policykit.policy
.......T.    /usr/share/polkit-1/policyconfig-1.dtd
.......T.  c /etc/polkit-1/rules.d/49-polkit-pkla-compat.rules
.......T.    /usr/bin/pkla-admin-identities
.......T.    /usr/bin/pkla-check-authorization
.......T.  d /usr/share/doc/polkit-pkla-compat/AUTHORS
.......T.  d /usr/share/doc/polkit-pkla-compat/COPYING
.......T.  d /usr/share/doc/polkit-pkla-compat/NEWS
.......T.  d /usr/share/doc/polkit-pkla-compat/README
.......T.  d /usr/share/man/man8/pkla-admin-identities.8.gz
.......T.  d /usr/share/man/man8/pkla-check-authorization.8.gz
.......T.  d /usr/share/man/man8/pklocalauthority.8.gz
.......T.  c /etc/dnf/protected.d/sudo.conf
.......T.  c /etc/pam.d/sudo
.......T.  c /etc/pam.d/sudo-i
.......T.  c /etc/sudo.conf
S.5....T.  c /etc/sudoers
.......T.    /usr/bin/cvtsudoers
.......T.    /usr/bin/sudo
.......T.    /usr/bin/sudoreplay
.......T.    /usr/lib/tmpfiles.d/sudo.conf
.......T.    /usr/libexec/sudo/audit_json.so
.......T.    /usr/libexec/sudo/group_file.so
.......T.    /usr/libexec/sudo/libsudo_util.so.0.0.0
.......T.    /usr/libexec/sudo/sesh
.......T.    /usr/libexec/sudo/sudo_noexec.so
.......T.    /usr/libexec/sudo/sudoers.so
.......T.    /usr/libexec/sudo/system_group.so
.......T.    /usr/sbin/visudo
.......T.  d /usr/share/doc/sudo/CONTRIBUTING.md
.......T.  d /usr/share/doc/sudo/CONTRIBUTORS.md
.......T.  d /usr/share/doc/sudo/HISTORY.md
.......T.  d /usr/share/doc/sudo/LICENSE.md
.......T.  d /usr/share/doc/sudo/NEWS
.......T.  d /usr/share/doc/sudo/README.LDAP.md
.......T.  d /usr/share/doc/sudo/README.md
.......T.  d /usr/share/doc/sudo/SECURITY.md
.......T.  d /usr/share/doc/sudo/TROUBLESHOOTING.md
.......T.  d /usr/share/doc/sudo/UPGRADE.md
.......T.  d /usr/share/doc/sudo/examples/cvtsudoers.conf
.......T.  d /usr/share/doc/sudo/examples/example_approval_plugin.py
.......T.  d /usr/share/doc/sudo/examples/example_audit_plugin.py
.......T.  d /usr/share/doc/sudo/examples/example_conversation.py
.......T.  d /usr/share/doc/sudo/examples/example_debugging.py
.......T.  d /usr/share/doc/sudo/examples/example_group_plugin.py
.......T.  d /usr/share/doc/sudo/examples/example_io_plugin.py
.......T.  d /usr/share/doc/sudo/examples/example_policy_plugin.py
.......T.  d /usr/share/doc/sudo/examples/pam.conf
.......T.  d /usr/share/doc/sudo/examples/sudo.conf
.......T.  d /usr/share/doc/sudo/examples/sudo_logsrvd.conf
.......T.  d /usr/share/doc/sudo/examples/sudoers
.......T.  d /usr/share/doc/sudo/examples/syslog.conf
.......T.  d /usr/share/doc/sudo/schema.ActiveDirectory
.......T.  d /usr/share/doc/sudo/schema.OpenLDAP
.......T.  d /usr/share/doc/sudo/schema.iPlanet
.......T.  d /usr/share/doc/sudo/schema.olcSudo
.......T.  l /usr/share/licenses/sudo/LICENSE.md
.......T.    /usr/share/locale/ast/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/ast/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/ca/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/ca/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/cs/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/cs/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/da/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/da/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/de/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/de/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/el/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/eo/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/eo/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/es/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/es/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/eu/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/eu/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/fa/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/fi/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/fi/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/fr/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/fr/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/fur/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/fur/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/gl/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/hr/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/hr/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/hu/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/hu/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/it/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/it/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/ja/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/ja/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/ka/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/ka/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/ko/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/ko/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/lt/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/nb/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/nb/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/nl/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/nl/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/nn/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/pl/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/pl/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/pt/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/pt/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/pt_BR/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/pt_BR/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/ro/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/ro/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/ru/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/ru/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/sk/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/sk/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/sl/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/sl/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/sq/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/sr/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/sr/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/sv/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/sv/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/tr/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/tr/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/uk/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/uk/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/vi/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/vi/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/zh_CN/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/zh_CN/LC_MESSAGES/sudoers.mo
.......T.    /usr/share/locale/zh_TW/LC_MESSAGES/sudo.mo
.......T.    /usr/share/locale/zh_TW/LC_MESSAGES/sudoers.mo
.......T.  d /usr/share/man/man1/cvtsudoers.1.gz
.......T.  d /usr/share/man/man5/sudo.conf.5.gz
.......T.  d /usr/share/man/man5/sudoers.5.gz
.......T.  d /usr/share/man/man5/sudoers.ldap.5.gz
.......T.  d /usr/share/man/man5/sudoers_timestamp.5.gz
.......T.  d /usr/share/man/man8/sudo.8.gz
.......T.  d /usr/share/man/man8/sudoreplay.8.gz
.......T.  d /usr/share/man/man8/visudo.8.gz
.......T.    /usr/lib64/libpolkit-qt5-agent-1.so.1.114.0
.......T.    /usr/lib64/libpolkit-qt5-core-1.so.1.114.0
.......T.    /usr/lib64/libpolkit-qt5-gui-1.so.1.114.0
.......T.  d /usr/share/doc/polkit-qt5-1/AUTHORS
.......T.  d /usr/share/doc/polkit-qt5-1/README
.......T.  l /usr/share/licenses/polkit-qt5-1/BSD-3-Clause.txt
.......T.  l /usr/share/licenses/polkit-qt5-1/GPL-2.0-or-later.txt
.......T.  l /usr/share/licenses/polkit-qt5-1/LGPL-2.0-or-later.txt
.......T.    /etc/xdg/autostart/polkit-kde-authentication-agent-1.desktop
.......T.    /usr/lib/systemd/user/plasma-polkit-agent.service
.......T.    /usr/libexec/kf5/polkit-kde-authentication-agent-1
.......T.    /usr/share/applications/org.kde.polkit-kde-authentication-agent-1.desktop
.......T.    /usr/share/knotifications5/policykit1-kde.notifyrc
.......T.  l /usr/share/licenses/polkit-kde/LICENSES/CC0-1.0.txt
.......T.  l /usr/share/licenses/polkit-kde/LICENSES/GPL-2.0-or-later.txt
.......T.    /usr/share/locale/ar/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/be/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/bg/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/bs/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/ca/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/ca@valencia/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/cs/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/da/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/de/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/el/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/en_GB/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/eo/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/es/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/et/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/eu/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/fi/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/fr/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/ga/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/gl/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/he/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/hr/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/hsb/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/hu/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/ia/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/id/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/ie/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/is/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/it/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/ja/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/ka/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/kk/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/km/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/ko/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/lt/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/mai/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/ml/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/mr/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/ms/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/nb/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/nds/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/nl/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/nn/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/pa/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/pl/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/pt/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/pt_BR/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/ro/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/ru/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/sk/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/sl/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/sr/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/sr@ijekavian/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/sr@ijekavianlatin/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/sr@latin/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/sv/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/tg/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/th/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/tr/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/ug/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/uk/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/vi/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/zh_CN/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
.......T.    /usr/share/locale/zh_TW/LC_MESSAGES/polkit-kde-authentication-agent-1.mo
[root@fedora user]# su - -c 'rpm -q -f $(find /etc/sudo* /etc/polkit*) | sort -u'
Die Datei /etc/polkit-1/rules.d/80-kcm-allow.rules gehört zu keinem Paket
Die Datei /etc/polkit-1/rules.d/80-libvirt-manage.rules gehört zu keinem Paket
Die Datei /etc/polkit-1/rules.d/80-udisks2-encrypted-unlock.rules gehört zu keinem Paket
Die Datei /etc/polkit-1/rules.d/80-udisks2-mount.rules gehört zu keinem Paket
Die Datei /etc/sudoers.d/mounts gehört zu keinem Paket
polkit-121-4.fc37.x86_64
polkit-pkla-compat-0.1-22.fc37.x86_64
sudo-1.9.13-1.p2.fc37.x86_64

Translation: The file x doesnt belong to any package

Thanks a lot!

[root@fedora user]# ls /etc/polkit-1/rules.d/
49-polkit-pkla-compat.rules  50-default.rules  80-kcm-allow.rules  80-libvirt-manage.rules  80-udisks2-encrypted-unlock.rules  80-udisks2-mount.rules

These rules are selfmade and I already tried moving them with no effect so I pushed them back to this folder. They are for allowing the wheel user to change the SDDM screen, open virt-manager and mount and unlock LUKS drives.

btw your paypal “Cant receive money currently”

1 Like

Yes, those should be your custom rules.

Looks like you have directly modified the default sudo config, which is best to avoid.
It is recommended to use sudoers.d to provide customization like this:

sudo tee /etc/sudoers.d/00-custom << EOF > /dev/null
%wheel ALL=(ALL) NOPASSWD: ALL
EOF

It seems you are not yet a member of the libvirt group, so consider joining it:

sudo usermod -a -G libvirt ${USER}

It makes possible to optimize your custom polkit rules by utilizing the built-in one:

sudo cat /usr/share/polkit-1/rules.d/50-libvirt.rules

Try fixing SELinux labels as explained here:
Troubleshooting SELinux - Fedora Magazine

Thanks, I will take a look.

Thanks! Totally forgot that, I edited the sudoers conf at the beginning, trying to get rid of these dialogs.

In general its best to have a password need for wheel, protection against malware right?

I already added user to the libvirt group, but its still not showing up. But nice, will have a look at the built in rules to avoid duplicates.

I will look for SELinux errors. Still getting the errors

could not determine $DISPLAY 
Can not contact kdeinit5!

Tried switching between /bin/fish and /bin/bash again, no effect

Edit:

tried deactivating SELinux with a similar, I guess the same result.

nano /etc/selinux/config # set enforcing to disabled
grubby --update-kernel ALL --args selinux=0

That is a permanent change.
You can do the same but have it persist only until the next boot with setenforce 0 which puts selinux into permissive mode (still logs events but does not block anything).
This way things can be tested without making the edit. The edit changes the way it is managed until the user resets the config file again.

When selinux is disabled it does not even log events so the user cannot even tell what it would do if it were enforcing.

1 Like

I set it to temporarly permissive now, but the same things occured with selinux completely disabled so…

I also deleted all configs, thinking it would reload them in that case, didnt happen for now, trying an rpm-ostree upgrade

rm -rf /etc/selinux/targeted /etc/selinux/config

Edit: Somehow it works again!

I randomly added my user to lots of groups like Flatpak, qemu, wheel, wheel again. Its still showing exactly as before, none of these groups show up, but I can do everything again that requires polkit authentification and I can launch wayland again…

weird?

My Selinux configs didnt restore, uuuhm, is there a command for that? I thought it would rescan automatically

I checked my groups with getent group | grep $USER as well as with id $USER

Edit:

no it doesnt anymore. I changed nothing but get the same error again. KDEinit5 cant connect to a display.

But now it seems I can update flatpaks and rpm-ostree? both work normally.

User is still in wheel, libvirt, plugdev and all.

SELinux is still disabled as it didnt restore with a rpm-ostree update, will have to find that out.