#1042716 xrdp: Using the nm-applet in a xfce session causes the entire UI to deadlock

Package:
xrdp
Source:
xrdp
Description:
Remote Desktop Protocol (RDP) server
Submitter:
Patrick Hibbs
Date:
2023-07-31 00:03:04 UTC
Severity:
normal
#1042716#5
Date:
2023-07-30 23:59:20 UTC
From:
To:
Dear Maintainer,

Attempting to use the nm-applet in a remote xrdp session under xfce causes
polkit to demand authentication for wifi-scanning. After successful
authentication, the menu appears but polkit again attempts to ask for
authentication to initiate wifi scans. This time however, the nm-applet menu is
still present, unusable, and cannot be dismissed. The polkit pop-up is also
present, but similarly cannot be interacted with nor dismissed by the user.

Because neither nm-applet's menu nor polkit's pop-up can be dismissed the
desktop is unusable. None of the menus work. Nor does the desktop icons. Alt-F4
fails to close anything. As this is a remote RDP session, the console cannot be
switched to with Ctrl-Alt-F[1-6], and disconnecting then reconnecting to the
RDP session just drops the user back into the broken desktop.

Ultimately, the user is stuck until the nm-applet menu times out and closes
automatically. (Seems to be around 5-10 minutes. As I got to typing the start
of this paragraph in reportbug before it finally closed...)

Attempting to cancel authentication after the timeout just makes polkit prompt
again indefinitely. (Which will retrigger the bug if authentication is
successful.)

The polkit permission that is broken seems to be:
org.freedesktop.NetworkManager.wifi.scan

Adding a polkit rules file under /etc/polkit-1/rules.d similar to the one for
the color-manager bug, fixes the issue. (See attachment.)

Ideally, the remote RDP session shouldn't need control over the network
connections, but as the nm-applet is common functionality for users, it should
at least fail gracefully and not continuously reprompt the user if a polkit
authentication attempt is successful.