bug#64807: 30.0.50; Editing files using sudo with fprintd hangs

bug#64807: 30.0.50; Editing files using sudo with fprintd hangs

[Theodor Thornhill via Bug reports for GNU Emacs, the Swiss army knife of text editors]

Hi Emacs (and Michael, forgive me if this isn't relevant for you)

I'm using Ubuntu on a thinkpad with fingerprint scanner, and have
enabled it to be used when sudo is invoked, setting it in pam.d. Fprintd
is the program (I believe) that checks the fingerprint.

To make the issue a little clearer, I'll show an example that works like
intended in Emacs, and the one that does not.

Both

This works:
1. M-x eshell
2. type "sudo ls" then RET
3. observe that eshell prompts:
  "Place your finger on the fingerprint reader"
4. If fingerprint is wrong or you wait for some period (10 seconds I
believe) it falls back to normal.

See example prompt:

```
$ sudo ls
Place your finger on the fingerprint reader
Cargo.lock  Cargo.toml	src  target
$ sudo ls
Place your finger on the fingerprint reader
Verification timed out
[sudo] password for theodor: 
Cargo.lock  Cargo.toml	src  target
```

This doesn't work as intended:
1. C-x C-f /sudo:Theodor:/ RET
2. Observe that Emacs appears to be hanging
  - the cursor is now spinning, and "C-x o" and friends doesn't work
3. Scan fingerprint
  - all is ok
4. Wait for timeout
  - enter password
  - all is ok

So to sum up - in the eshell case we get some indication to scan the
fingerprint, in the sudo/tramp case we don't. Everything works as it
should, in that verification passes, but the UI is confusing, and it
appears to hang for other commands. C-g works.

Is there some way for Emacs to prompt for the fingerprint to be scanned,
and not to freeze up?

Let me know if I need to provide more information :)

Thanks,
Theo

bug#64807: 30.0.50; Editing files using sudo with fprintd hangs

[Michael Albinus]

Theodor Thornhill <theo@thornhill.no> writes:

> Hi Emacs (and Michael, forgive me if this isn't relevant for you)

Hi Theodor,

> I'm using Ubuntu on a thinkpad with fingerprint scanner, and have
> enabled it to be used when sudo is invoked, setting it in pam.d. Fprintd
> is the program (I believe) that checks the fingerprint.
>
> Is there some way for Emacs to prompt for the fingerprint to be scanned,
> and not to freeze up?

Tramp has support for 2FA security. Please add the fingerprint prompt to
the user option tramp-security-key-confirm-regexp. If there is a second
message, telling you that the security key (your finger :-) has been
confirmed, add this message to the user option
tramp-security-key-confirmed-regexp.

> Let me know if I need to provide more information :)

If it doesn't work, send me Tramp traces (tramp-verbose 6 shall be sufficient).

> Thanks,
> Theo

Best regards, Michael.

bug#64807: 30.0.50; Editing files using sudo with fprintd hangs

[Michael Albinus]

Michael Albinus <michael.albinus@gmx.de> writes:

Hi Theodor,

>> I'm using Ubuntu on a thinkpad with fingerprint scanner, and have
>> enabled it to be used when sudo is invoked, setting it in pam.d. Fprintd
>> is the program (I believe) that checks the fingerprint.
>>
>> Is there some way for Emacs to prompt for the fingerprint to be scanned,
>> and not to freeze up?
>
> Tramp has support for 2FA security. Please add the fingerprint prompt to
> the user option tramp-security-key-confirm-regexp. If there is a second
> message, telling you that the security key (your finger :-) has been
> confirmed, add this message to the user option
> tramp-security-key-confirmed-regexp.

I don't know whether this has worked for you. Could you pls tell?

And in case it works: Which message have you added to
tramp-security-key-confirm-regexp? Something I could add to Tramp proper?

>> Thanks,
>> Theo

Best regards, Michael.

bug#64807: 30.0.50; Editing files using sudo with fprintd hangs

[Michael Albinus]

Michael Albinus <michael.albinus@gmx.de> writes:

Hi Theodor,

>>> I'm using Ubuntu on a thinkpad with fingerprint scanner, and have
>>> enabled it to be used when sudo is invoked, setting it in pam.d. Fprintd
>>> is the program (I believe) that checks the fingerprint.
>>>
>>> Is there some way for Emacs to prompt for the fingerprint to be scanned,
>>> and not to freeze up?
>>
>> Tramp has support for 2FA security. Please add the fingerprint prompt to
>> the user option tramp-security-key-confirm-regexp. If there is a second
>> message, telling you that the security key (your finger :-) has been
>> confirmed, add this message to the user option
>> tramp-security-key-confirmed-regexp.
>
> I don't know whether this has worked for you. Could you pls tell?
>
> And in case it works: Which message have you added to
> tramp-security-key-confirm-regexp? Something I could add to Tramp proper?

No further comment, so I'm assuming it works. Closing the bug.

Best regards, Michael.

bug#64807: closed (Re: bug#64807: 30.0.50; Editing files using sudo with fprintd hangs)

[Theodor Thornhill via Bug reports for GNU Emacs, the Swiss army knife of text editors]

[-- Attachment #1: Type: text/html, Size: 510 bytes --]