• root password demand after boot

    From faeychild@2:250/1 to All on Fri Sep 24 22:24:27 2021


    Today's boot up triggered a boot password demand after the desktop appeared

    "Root password is required to mount SSD"

    Two boots caused it to pop up but the third boot was clean.
    The SSD was mounted OK each time. The password not required.

    I wonder do I have a race hazard?


    --
    faeychild
    Running plasmashell 5.20.4 on 5.10.62-desktop-1.mga8 kernel.
    Mageia release 8 (Official) for x86_64 installed via Mageia-8-x86_64-DVD.iso


    --- MBSE BBS v1.0.7.22 (GNU/Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From David W. Hodgins@2:250/1 to All on Fri Sep 24 22:29:50 2021
    On Fri, 24 Sep 2021 17:24:27 -0400, faeychild <faeychild@nomail.afraid.org> wrote:
    Today's boot up triggered a boot password demand after the desktop appeared "Root password is required to mount SSD"
    Two boots caused it to pop up but the third boot was clean.
    The SSD was mounted OK each time. The password not required.
    I wonder do I have a race hazard?

    That's bizarre. How is the ssd normally being mounted?

    Regards, Dave Hodgins

    --
    Change dwhodgins@nomail.afraid.org to davidwhodgins@teksavvy.com for
    email replies.

    --- MBSE BBS v1.0.7.22 (GNU/Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From faeychild@2:250/1 to All on Fri Sep 24 23:18:33 2021
    On 25/9/21 07:29, David W. Hodgins wrote:
    On Fri, 24 Sep 2021 17:24:27 -0400, faeychild
    <faeychild@nomail.afraid.org> wrote:
    Today's boot up triggered a boot password demand after the desktop
    appeared
    "Root password is required to mount SSD"
    Two boots caused it to pop up but the third boot was clean.
    The SSD was mounted OK each time. The password not required.
    I wonder do I have a race hazard?

    That's bizarre. How is the ssd normally being mounted?

    Regards, Dave Hodgins

    Supposedly at boot from fstab

    # Entry for /dev/nvme0n1p8 :
    UUID=7a03c56e-827b-4550-9b98-ca2e9f2582f4 / ext4 noatime,acl 1 1
    # Entry for /dev/nvme0n1p1 :
    UUID=8662-5EDE /boot/EFI vfat iocharset=utf8,umask=000 0 0
    none /proc proc defaults 0 0
    # Entry for /dev/sda1 :
    UUID=ddce96e5-77d9-45dd-b1c7-4bf10d42fff7 /video ext4 noatime,acl 1 2
    # Entry for /dev/nvme0n1p3 :
    UUID=0f26b0d8-adf7-45cf-a963-cc5d89c1a8e4 swap swap defaults 0 0


    with apologies to Bit Twister; I haven't run his "Label" script yet

    I order matters I could shuffle "/dev/sda1" and "/boot/EFI"
    to the end of list.


    --
    faeychild
    Running plasmashell 5.20.4 on 5.10.62-desktop-1.mga8 kernel.
    Mageia release 8 (Official) for x86_64 installed via Mageia-8-x86_64-DVD.iso


    --- MBSE BBS v1.0.7.22 (GNU/Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From Bobbie Sellers@2:250/1 to All on Sat Sep 25 01:46:43 2021
    On 9/24/21 15:18, faeychild wrote:
    On 25/9/21 07:29, David W. Hodgins wrote:
    On Fri, 24 Sep 2021 17:24:27 -0400, faeychild
    <faeychild@nomail.afraid.org> wrote:
    Today's boot up triggered a boot password demand after the desktop
    appeared
    "Root password is required to mount SSD"
    Two boots caused it to pop up but the third boot was clean.
    The SSD was mounted OK each time. The password not required.
    I wonder do I have a race hazard?

    That's bizarre. How is the ssd normally being mounted?

    Regards, Dave Hodgins

      Supposedly at boot  from fstab

    # Entry for /dev/nvme0n1p8 :
    UUID=7a03c56e-827b-4550-9b98-ca2e9f2582f4 / ext4 noatime,acl 1 1
    # Entry for /dev/nvme0n1p1 :
    UUID=8662-5EDE /boot/EFI vfat iocharset=utf8,umask=000 0 0
    none /proc proc defaults 0 0
    # Entry for /dev/sda1 :
    UUID=ddce96e5-77d9-45dd-b1c7-4bf10d42fff7 /video ext4 noatime,acl 1 2
    # Entry for /dev/nvme0n1p3 :
    UUID=0f26b0d8-adf7-45cf-a963-cc5d89c1a8e4 swap swap defaults 0 0


    with apologies to Bit Twister; I haven't run his "Label" script yet

    I order matters I could shuffle "/dev/sda1" and "/boot/EFI"
    to the end of list.




    Look for a program that you had running in terminal or otherwise
    that demanded root privileges.

    I see this with Synaptic too often when I forget to shut it down
    before rebooting.

    bliss --“Nearly any fool can use a GNU/Linux computer. Many do.” After
    all here I am...


    --
    bliss dash SF 4 ever at dslextreme dot com

    --- MBSE BBS v1.0.7.22 (GNU/Linux-x86_64)
    * Origin: dis-organization (2:250/1@fidonet)
  • From David W. Hodgins@2:250/1 to All on Sat Sep 25 02:00:04 2021
    On Fri, 24 Sep 2021 18:18:33 -0400, faeychild <faeychild@nomail.afraid.org> wrote:

    On 25/9/21 07:29, David W. Hodgins wrote:
    On Fri, 24 Sep 2021 17:24:27 -0400, faeychild
    <faeychild@nomail.afraid.org> wrote:
    Today's boot up triggered a boot password demand after the desktop
    appeared
    "Root password is required to mount SSD"
    Two boots caused it to pop up but the third boot was clean.
    The SSD was mounted OK each time. The password not required.
    I wonder do I have a race hazard?

    That's bizarre. How is the ssd normally being mounted?

    Regards, Dave Hodgins

    Supposedly at boot from fstab

    # Entry for /dev/nvme0n1p8 :
    UUID=7a03c56e-827b-4550-9b98-ca2e9f2582f4 / ext4 noatime,acl 1 1
    # Entry for /dev/nvme0n1p1 :
    UUID=8662-5EDE /boot/EFI vfat iocharset=utf8,umask=000 0 0
    none /proc proc defaults 0 0
    # Entry for /dev/sda1 :
    UUID=ddce96e5-77d9-45dd-b1c7-4bf10d42fff7 /video ext4 noatime,acl 1 2
    # Entry for /dev/nvme0n1p3 :
    UUID=0f26b0d8-adf7-45cf-a963-cc5d89c1a8e4 swap swap defaults 0 0


    with apologies to Bit Twister; I haven't run his "Label" script yet

    I order matters I could shuffle "/dev/sda1" and "/boot/EFI"
    to the end of list.

    Ok, so it's a pcie ssd "drive", as in a pcie card. It should be available for mounting well before the uefi firmware even starts an os, and all of the file systems mounted by the initrd before it switches root. I don't see anything there
    that could trigger a mount request that's run as the user.

    Is that the actual message, as in it explicitly stated "mount SSD"? If so, then it didn't come from the system based on fstab. I'd be checking the user startup scripts, possibly samba or other's for a reference to "SSD". Possibly some application set to autostart, that was using a removable drive mounted as SSD

    Regards, Dave Hodgins

    --
    Change dwhodgins@nomail.afraid.org to davidwhodgins@teksavvy.com for
    email replies.

    --- MBSE BBS v1.0.7.22 (GNU/Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From faeychild@2:250/1 to All on Sat Sep 25 06:44:45 2021
    On 25/9/21 11:00, David W. Hodgins wrote:
    On Fri, 24 Sep 2021 18:18:33 -0400, faeychild
    <faeychild@nomail.afraid.org> wrote:

    On 25/9/21 07:29, David W. Hodgins wrote:
    On Fri, 24 Sep 2021 17:24:27 -0400, faeychild
    <faeychild@nomail.afraid.org> wrote:
    Today's boot up triggered a boot password demand after the desktop
    appeared
    "Root password is required to mount SSD"
    Two boots caused it to pop up but the third boot was clean.
    The SSD was mounted OK each time. The password not required.
    I wonder do I have a race hazard?

    That's bizarre. How is the ssd normally being mounted?

    Regards, Dave Hodgins

       Supposedly at boot  from fstab

    # Entry for /dev/nvme0n1p8 :
    UUID=7a03c56e-827b-4550-9b98-ca2e9f2582f4 / ext4 noatime,acl 1 1
    # Entry for /dev/nvme0n1p1 :
    UUID=8662-5EDE /boot/EFI vfat iocharset=utf8,umask=000 0 0
    none /proc proc defaults 0 0
    # Entry for /dev/sda1 :
    UUID=ddce96e5-77d9-45dd-b1c7-4bf10d42fff7 /video ext4 noatime,acl 1 2
    # Entry for /dev/nvme0n1p3 :
    UUID=0f26b0d8-adf7-45cf-a963-cc5d89c1a8e4 swap swap defaults 0 0


    with apologies to Bit Twister; I haven't run his "Label" script yet

    I order matters I could shuffle "/dev/sda1" and "/boot/EFI"
    to the end of list.

    Ok, so it's a pcie ssd "drive", as in a pcie card. It should be
    available for
    mounting well before the uefi firmware even starts an os, and all of the file
    systems mounted by the initrd before it switches root. I don't see
    anything there
    that could trigger a mount request that's run as the user.

    Is that the actual message, as in it explicitly stated "mount SSD"? If
    so, then


    No It says to mount nvme0***-something which is a partition on the SSD

    I note next time

    Also my desktop switching is gone again

    I haven't been running any root privileged stuff. Mostly the browser and youtube. All happened while I was away from the computer

    The only recent change has been the last update





    --
    faeychild
    Running plasmashell 5.20.4 on 5.10.62-desktop-1.mga8 kernel.
    Mageia release 8 (Official) for x86_64 installed via Mageia-8-x86_64-DVD.iso


    --- MBSE BBS v1.0.7.22 (GNU/Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From faeychild@2:250/1 to All on Sat Sep 25 08:20:08 2021
    On 25/9/21 15:44, faeychild wrote:

    No It says to mount nvme0***-something which is a partition on the SSD

    I note next time

    Also my desktop switching is gone again

    I haven't been running any root privileged stuff. Mostly the browser and youtube.  All happened while I was away from the computer

    The only recent change has been the last update



    It says that an application is attempting to perform... Authentication
    is required to mount /dev/nvme0n1p5. which is a backup partition


    It's not listed in fstab. no application is running the session is
    starting with a clean desktop.

    This does not happen with "junk" user
    Clearly it is in my $HOME config files. Is there a way to clear the
    $HOME folder and repopulate it.

    --
    faeychild
    Running plasmashell 5.20.4 on 5.10.62-desktop-1.mga8 kernel.
    Mageia release 8 (Official) for x86_64 installed via Mageia-8-x86_64-DVD.iso


    --- MBSE BBS v1.0.7.22 (GNU/Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From Jim@2:250/1 to All on Sat Sep 25 14:48:00 2021
    On Sat, 25 Sep 2021 17:20:08 +1000, faeychild wrote:

    On 25/9/21 15:44, faeychild wrote:

    No It says to mount nvme0***-something which is a partition on the SSD

    I note next time

    Also my desktop switching is gone again

    I haven't been running any root privileged stuff. Mostly the browser
    and youtube.  All happened while I was away from the computer

    The only recent change has been the last update



    It says that an application is attempting to perform... Authentication
    is required to mount /dev/nvme0n1p5. which is a backup partition


    It's not listed in fstab. no application is running the session is
    starting with a clean desktop.

    This does not happen with "junk" user Clearly it is in my $HOME config
    files. Is there a way to clear the $HOME folder and repopulate it.

    Before repopulating, I would look for nvme0n1p5 in all the files in $HOME
    and subordinate directories.

    cd
    grep -R nvme0n1p5 *

    You might cd /etc and do the same there.

    Cheers!

    jim b.

    --
    UNIX is not user-unfriendly, it merely
    expects users to be computer friendly.

    --- MBSE BBS v1.0.7.22 (GNU/Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From Bit Twister@2:250/1 to All on Sat Sep 25 18:12:56 2021
    On Sat, 25 Sep 2021 17:20:08 +1000, faeychild wrote:

    It says that an application is attempting to perform... Authentication
    is required to mount /dev/nvme0n1p5. which is a backup partition


    It's not listed in fstab. no application is running the session is
    starting with a clean desktop.

    This does not happen with "junk" user
    Clearly it is in my $HOME config files. Is there a way to clear the
    $HOME folder and repopulate it.


    Typical method is to rename or delete the DE directory to reset/clear DE settings depending on DE. Another directory is ~/.config.

    NOTE: Method is dangerous depending on DE. You can lose application
    data.

    For example run locate $USER | grep /data
    Note: list is not inconclusive depending on apps used.


    --- MBSE BBS v1.0.7.22 (GNU/Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From David W. Hodgins@2:250/1 to All on Sat Sep 25 18:53:54 2021
    On Sat, 25 Sep 2021 03:20:08 -0400, faeychild <faeychild@nomail.afraid.org> wrote:
    It says that an application is attempting to perform... Authentication
    is required to mount /dev/nvme0n1p5. which is a backup partition
    It's not listed in fstab. no application is running the session is
    starting with a clean desktop.
    This does not happen with "junk" user
    Clearly it is in my $HOME config files. Is there a way to clear the
    $HOME folder and repopulate it.

    How do you normally perform the backups? Whatever applications was used to last do a backup or view files in the backup still has it listed in a config file.

    As it's a pcie nvram ssd drive that's always present, why not mount it in fstab so it's accessible?

    Regards, Dave Hodgins

    --
    Change dwhodgins@nomail.afraid.org to davidwhodgins@teksavvy.com for
    email replies.

    --- MBSE BBS v1.0.7.22 (GNU/Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From faeychild@2:250/1 to All on Mon Sep 27 23:33:51 2021
    On 25/9/21 23:48, Jim wrote:


    Before repopulating, I would look for nvme0n1p5 in all the files in $HOME
    and subordinate directories.

    cd
    grep -R nvme0n1p5 *

    You might cd /etc and do the same there.



    [faeychild@unimatrix ~]$ grep -R nvme0n1p5 *
    Desktop/Bits-brain:rsync -aAXv /dev/nvme0n1p2 --exclude={"/dev/*","/proc/*","/sys/*","/tmp/*","/run/*","/mnt/*","/video/*","/media/*","/lost+found"}
    /dev/nvme0n1p5
    Desktop/bits-rsync-script:> _mga_bu=/dev/nvme0n1p5/
    [faeychild@unimatrix ~]$

    These are two links to text files. Removing the links made no difference.

    But! this morning I booted up intending to add the entry to fstab and
    went off to do something else. Upon my return I was faced with the login screen; I logged in and there was no message.


    So I rebooted logged in and got the message??

    I rebooted again, went of to make coffee, came back add logged; no message

    It's a delay thing. Because it doesn't affect "junk" user I suspect my
    $HOME files somewhere


    --
    faeychild
    Running plasmashell 5.20.4 on 5.10.62-desktop-1.mga8 kernel.
    Mageia release 8 (Official) for x86_64 installed via Mageia-8-x86_64-DVD.iso


    --- MBSE BBS v1.0.7.22 (GNU/Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From faeychild@2:250/1 to All on Tue Sep 28 03:40:08 2021
    On 26/9/21 03:12, Bit Twister wrote:

    For example run locate $USER | grep /data
    Note: list is not inconclusive depending on apps used.


    Yes Quite a bit of "data"

    I would, of course, backup Thunderbird and Mozilla and think I've got it
    all, totally miss something else important. Been there. done that. got
    the tea shirt.

    I have been testing with junk, erasing the 'junk" home directory as
    root and finding it reconstructed

    The number of files replaced is really extensive.
    Where is this replacement "Blue Print" located. Is it a script?


    --
    faeychild
    Running plasmashell 5.20.4 on 5.10.62-desktop-1.mga8 kernel.
    Mageia release 8 (Official) for x86_64 installed via Mageia-8-x86_64-DVD.iso


    --- MBSE BBS v1.0.7.22 (GNU/Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From David W. Hodgins@2:250/1 to All on Tue Sep 28 03:59:06 2021
    On Mon, 27 Sep 2021 22:40:08 -0400, faeychild <faeychild@nomail.afraid.org> wrote:
    I have been testing with junk, erasing the 'junk" home directory as
    root and finding it reconstructed

    The number of files replaced is really extensive.
    Where is this replacement "Blue Print" located. Is it a script?

    It starts with a copy of the files in /etc/skel/, with the rest created by whatever desktop environment is being run.

    Regards, Dave Hodgins

    --
    Change dwhodgins@nomail.afraid.org to davidwhodgins@teksavvy.com for
    email replies.

    --- MBSE BBS v1.0.7.22 (GNU/Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From faeychild@2:250/1 to All on Tue Sep 28 05:18:03 2021
    On 28/9/21 12:59, David W. Hodgins wrote:


    It starts with a copy of the files in /etc/skel/, with the rest created by whatever desktop environment is being run.

    Regards, Dave Hodgins


    Yes I found that but there are many more files not indicated there

    I was curious about their generation even the folders Document Music Downloads Templates, .config .local etc.
    So they are all created by the DE, that's nice . So many things I don't
    know.
    Still, they are recreated . If I obliterate the contents of HOME I will
    get a vanilla desktop back.

    regards
    --
    faeychild
    Running plasmashell 5.20.4 on 5.10.62-desktop-1.mga8 kernel.
    Mageia release 8 (Official) for x86_64 installed via Mageia-8-x86_64-DVD.iso


    --- MBSE BBS v1.0.7.22 (GNU/Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From faeychild@2:250/1 to All on Wed Sep 29 12:44:15 2021
    On 25/9/21 23:48, Jim wrote:

    cd
    grep -R nvme0n1p5 *

    You might cd /etc and do the same there.

    Cheers!

    jim b.


    grep -R nvme0n1p5 *
    Desktop/Bits-brain:rsync -aAXv /dev/nvme0n1p2 --exclude={"/dev/*","/proc/*","/sys/*","/tmp/*","/run/*","/mnt/*","/video/*","/media/*","/lost+found"}
    /dev/nvme0n1p5
    [faeychild@unimatrix ~]$ su - root
    Password:
    [root@unimatrix ~]# cd /etc
    [root@unimatrix etc]# grep -R nvme0n1p5 *
    [root@unimatrix etc]#


    only in a liked text file

    I guess I will get around to reverse engineering by substitution.
    and track down the malevolent file

    regards
    --
    faeychild
    Running plasmashell 5.20.4 on 5.10.62-desktop-1.mga8 kernel.
    Mageia release 8 (Official) for x86_64 installed via Mageia-8-x86_64-DVD.iso


    --- MBSE BBS v1.0.7.22 (GNU/Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From faeychild@2:250/1 to All on Fri Oct 22 21:40:24 2021
    On 25/9/21 07:24, faeychild wrote:


    Today's boot up triggered a boot password demand after the desktop appeared

    "Root password is required to mount SSD"

    Two boots caused it to pop up but the third boot was clean.
    The SSD was mounted OK each time. The password not required.

    I wonder do I have a race hazard?




    [Breaking News]

    The latest update has eliminated the password demand.

    I am no longer able to take up the challenge to chase it down :-(

    Can't claim to be totally broken hearted though :-)

    --
    faeychild
    Running plasmashell 5.20.4 on 5.10.70-desktop-1.mga8 kernel.
    Mageia release 8 (Official) for x86_64 installed via Mageia-8-x86_64-DVD.iso


    --- MBSE BBS v1.0.7.22 (GNU/Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)
  • From faeychild@2:250/1 to All on Sun Oct 24 21:49:21 2021
    On 23/10/21 07:40, faeychild wrote:
    On 25/9/21 07:24, faeychild wrote:


    Today's boot up triggered a boot password demand after the desktop
    appeared

    "Root password is required to mount SSD"

    Two boots caused it to pop up but the third boot was clean.
    The SSD was mounted OK each time. The password not required.

    I wonder do I have a race hazard?




    [Breaking News]

    The latest update has eliminated the password demand.

    I am no longer able to take up the challenge to chase it down  :-(

    Can't claim to be totally broken hearted though  :-)



    NO! It's back again. I do have a challenge to take up

    --
    faeychild
    Running plasmashell 5.20.4 on 5.10.70-desktop-1.mga8 kernel.
    Mageia release 8 (Official) for x86_64 installed via Mageia-8-x86_64-DVD.iso


    --- MBSE BBS v1.0.7.22 (GNU/Linux-x86_64)
    * Origin: A noiseless patient Spider (2:250/1@fidonet)