[Fedora 23 beta] Under Wayland, apps run via su or sudo are not authorised to connect to the X11 display server

[Mike Fleetwood]

Hi,

I'm an upstream GParted developer and I recently looked at this bug
report:

[Bug 1266771] In Wayland mode, gparted wont start from terminal ( eg
sudo gparted /dev/sda )
https://bugzilla.redhat.com/show_bug.cgi?id=1266771

I concluded that gdm (GNOME Display Manager) doesn't set-up an xauth
token when logging the user in when they select "GNOME on Wayland" where
it does when they use the "GNONE" on native X11 display server.  This
leads to apps run via su and sudo not working because they aren't
authorised to connect to the X11 display server.

Just wanted to draw your attention to this so you can evaluate if it is
intended or a significant bug.

Thanks,
Mike

[František Zatloukal]

Hi Mike,
I've reported it already:
https://bugzilla.redhat.com/show_bug.cgi?id=1266792

2015-10-05 12:17 GMT+02:00 Mike Fleetwood :
> Hi,
>
> I'm an upstream GParted developer and I recently looked at this bug
> report:
>
> [Bug 1266771] In Wayland mode, gparted wont start from terminal ( eg
> sudo gparted /dev/sda )
> https://bugzilla.redhat.com/show_bug.cgi?id=1266771
>
> I concluded that gdm (GNOME Display Manager) doesn't set-up an xauth
> token when logging the user in when they select "GNOME on Wayland" where
> it does when they use the "GNONE" on native X11 display server.  This
> leads to apps run via su and sudo not working because they aren't
> authorised to connect to the X11 display server.
>
> Just wanted to draw your attention to this so you can evaluate if it is
> intended or a significant bug.
>
> Thanks,
> Mike
> --
> test mailing list
> [e-mail]
> To unsubscribe:
> https://admin.fedoraproject.org/mailman/listinfo/test

[Adam Williamson]

On Mon, 2015-10-05 at 11:17 +0100, Mike Fleetwood wrote:
> Hi,
>
> I'm an upstream GParted developer and I recently looked at this bug
> report:
>
> [Bug 1266771] In Wayland mode, gparted wont start from terminal ( eg
> sudo gparted /dev/sda )
> https://bugzilla.redhat.com/show_bug.cgi?id=1266771
>
> I concluded that gdm (GNOME Display Manager) doesn't set-up an xauth
> token when logging the user in when they select "GNOME on Wayland"
> where
> it does when they use the "GNONE" on native X11 display server.  This
> leads to apps run via su and sudo not working because they aren't
> authorised to connect to the X11 display server.
>
> Just wanted to draw your attention to this so you can evaluate if it
> is
> intended or a significant bug.

There's an xinit.d script to do this under X, I think:
/etc/X11/xinit/xinitrc.d/localuser.sh . Also 50-systemd-user.sh .