[gentoo-user] gnome-keyring-daemon processes running as root

[gentoo-user] gnome-keyring-daemon processes running as root

[Francesco Turco]

Hello. I'm a GNOME 3.12 user with a couple of problems that could depend
on GNOME keyring running as root instead of a non-privileged user.

This is the situation before logging in with GDM:

$ ps aux | grep keyring
root       458  0.0  0.0 115220  2808 ?        Sl   10:53   0:00
/usr/bin/gnome-keyring-daemon --daemonize --login
fturco     474  0.0  0.0  10572  2212 tty1     S+   10:53   0:00 grep
--colour=auto keyring

This is the situation after logging in with GDM:

$ ps aux | grep keyring
root       458  0.0  0.0 115220  2808 ?        Sl   10:53   0:00
/usr/bin/gnome-keyring-daemon --daemonize --login
root       495  0.0  0.0 115220  2784 ?        Sl   10:53   0:00
/usr/bin/gnome-keyring-daemon --daemonize --login
root       499  0.0  0.0 115248  3672 ?        Sl   10:53   0:00
/usr/bin/gnome-keyring-daemon --daemonize --login
root       534  0.0  0.1 294352  8692 ?        Sl   10:53   0:00
/usr/bin/gnome-keyring-daemon --start --components=ssh
root       550  0.0  0.1 359888  8636 ?        Sl   10:53   0:00
/usr/bin/gnome-keyring-daemon --start --components=pkcs11
root       558  0.0  0.1 359888  8480 ?        Sl   10:53   0:00
/usr/bin/gnome-keyring-daemon --start --components=secrets
root       568  0.0  0.1 294356  8560 ?        Sl   10:53   0:00
/usr/bin/gnome-keyring-daemon --start --components=gpg
fturco     753  0.0  0.0  10576  2236 pts/0    S+   10:54   0:00 grep
--colour=auto keyring

As you can see I have many gnome-keyring-daemon processes running as
root. I also noted that on my system /usr/bin/gnome-keyring-daemon has
the setuid bit set:

$ ls -l /usr/bin/gnome-keyring-daemon 
-rws--x--x 1 root root 940184 Jun  8 16:18 /usr/bin/gnome-keyring-daemon

Some directories are owned by root:

$ ls -ld /run/user/1000/keyring/
drwx------ 2 root fturco 100 Jun 15 10:55 /run/user/1000/keyring/

$ ls -ld /home/fturco/.local/share/keyrings
drwx------ 2 root fturco 4096 Jun  9 18:53
/home/fturco/.local/share/keyrings

Is all of this normal?

P.S. At the beginning I hinted at a couple of problem I'm having: 1) I
cannot access my e-mail account with Evolution; 2) I also cannot connect
to my VPN with Network Manager. In both cases I get the following error
message in journalctl:

> Error calling StartServiceByName for org.freedesktop.secrets: Timeout was reached 

There are two bugs on GNOME bugzilla describing these problems, one for
Evolution and the other one for Network Manager:

- https://bugzilla.gnome.org/show_bug.cgi?id=728469
- https://bugzilla.gnome.org/show_bug.cgi?id=731372

Thank you.

Re: [gentoo-user] gnome-keyring-daemon processes running as root

[Francesco Turco]

On Sun, Jun 15, 2014, at 11:08, Francesco Turco wrote:
> As you can see I have many gnome-keyring-daemon processes running as
> root. I also noted that on my system /usr/bin/gnome-keyring-daemon has
> the setuid bit set:
> 
> $ ls -l /usr/bin/gnome-keyring-daemon 
> -rws--x--x 1 root root 940184 Jun  8 16:18 /usr/bin/gnome-keyring-daemon

My problem is fixed now. It was indeed due to the setuid bit. See Gentoo
bug 513870 (https://bugs.gentoo.org/show_bug.cgi?id=513870) for more
details.