Fedora Linux Support Community & Resources Center
  #1  
Old 12th October 2017, 08:16 PM
Ted Lyngmo Offline
Registered User
 
Join Date: Nov 2015
Location: Gothenburg, Sweden
Posts: 17
windows_7chrome
Question F26 server - wget - p11-kit/OpenSC - pcsc-lite/pcscd - polkit

Hi!

Whenever a user is using wget to fetch a webpage via https, I'll get in messages like this in /var/log/messages:

Code:
2017-09-21T10:54:35+02:00 ninja pcscd[2721]: 03445385 auth.c:137:IsClientAuthorized() Process 48952 (user: 48) is NOT authorized for action: access_pcsc
2017-09-21T10:54:35+02:00 ninja pcscd[2721]: 00000279 winscard_svc.c:335:ContextThread() Rejected unauthorized PC/SC client
This started after upgrading to F26 (or possibly F25 which was installed for a few days). I have no idea why wget (via one of the libraries involved) would try to access the smart card reader without the user telling it to. Even though it fails getting access to a reader (which I've currently got none), the https pages are received just fine.

curl works without triggering these kinds of messages.

Is there anything I could do to stop wget https requests from trying to access a smart card reader (unless told to)? I haven't changed any configuration for wget or the libs so they should be standard F26.

I did however add two polkit rules to grant everyone smart card access to stop the log messages:

Code:
# cat /usr/share/polkit-1/rules.d/org.debian.pcsc-lite.rules

polkit.addRule(function(action, subject) {
    if (action.id == "org.debian.pcsc-lite.access_card" &&
        action.lookup("reader") == 'name of reader' &&
        subject.active ) {
            return polkit.Result.YES;
    }
});

polkit.addRule(function(action, subject) {
    if (action.id == "org.debian.pcsc-lite.access_pcsc" &&
        subject.active ) {
            return polkit.Result.YES;
    }
});
That stopped the log messages but I can't keep it like this if I decide to connect a smart card reader. Any ideas what to do to solve this properly?

Br,
Ted

Last edited by Ted Lyngmo; 12th October 2017 at 08:46 PM. Reason: typo
Reply With Quote
Reply

Tags
f26 , opensc , p11kit , p11kit or opensc , pcscd , pcsclite or pcscd , polkit , server , wget

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
cyberjack pcsc Sargot Hardware & Laptops 0 27th May 2011 07:04 PM
pcsc-lite jpoland Using Fedora 1 14th June 2010 02:58 AM
problem with pcscd barq Using Fedora 1 6th February 2008 04:29 PM
Download by wget and socks5 proxy server, how to jiawj Using Fedora 0 25th October 2004 09:49 AM


Current GMT-time: 10:17 (Saturday, 21-10-2017)

TopSubscribe to XML RSS for all Threads in all ForumsFedoraForumDotOrg Archive
logo

All trademarks, and forum posts in this site are property of their respective owner(s).
FedoraForum.org is privately owned and is not directly sponsored by the Fedora Project or Red Hat, Inc.

Privacy Policy | Term of Use | Posting Guidelines | Archive | Contact Us | Founding Members

Powered by vBulletin® Copyright ©2000 - 2012, vBulletin Solutions, Inc.

FedoraForum is Powered by RedHat