Date: Thu, 9 Jan 2025 09:27:05 +0300 From: Gleb Popov <arrowd@freebsd.org> To: Craig Leres <leres@freebsd.org> Cc: ports-committers@freebsd.org, dev-commits-ports-all@freebsd.org, dev-commits-ports-main@freebsd.org Subject: Re: git: 726b0eccd65b - main - devel/pcsc-lite: Update to 2.3.1 Message-ID: <CALH631nac37mT%2BtBvtTRV9G29LbLHJKACU36dgMCkLkAXOt-dQ@mail.gmail.com> In-Reply-To: <273aec36-c58b-4009-9eea-cea2b31ae38a@freebsd.org> References: <202501051556.505FuNhY070016@gitrepo.freebsd.org> <273aec36-c58b-4009-9eea-cea2b31ae38a@freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Jan 9, 2025 at 2:16=E2=80=AFAM Craig Leres <leres@freebsd.org> wrot=
e:
>
> I had a involuntary reboot today and find that this version breaks my
> use of hardware tokens (feitian ePass2003 and yubikey) with ssh-agent. I
> can get things working again by reverting to 2.3.0 (and restarting pcscd)=
.
>
> The impression I get is that it's some kind of permission problem. When
> I insert a token and run "opensc-tool -l" as a user there is no output;
> when I run as root it shows the token.
The policy file for pcsc says
<allow_any>no</allow_any>
<allow_inactive>no</allow_inactive>
<allow_active>yes</allow_active>
Polkit determines "activeness" by asking the ConsoleKit daemon.
This in turn means that you have to register your graphical or console
session with ConsoleKit.
This is done automatically when you're using SDDM to log in.
If you're starting the graphical session via "startx", then your
~/.xinitrc should have something like
exec dbus-launch --exit-with-x11 ck-launch-session startplasma-x11
If you don't really need Polkit-based access control, you can disable
the POLKIT option.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CALH631nac37mT%2BtBvtTRV9G29LbLHJKACU36dgMCkLkAXOt-dQ>