Bug #15757

Some VeraCrypt volumes require admin password to unlock

Added by segfault 2018-07-31 09:14:32 . Updated 2019-02-23 14:49:02 .

Status:
Resolved
Priority:
Normal
Assignee:
Category:
Target version:
Start date:
2018-07-31
Due date:
% Done:

100%

Feature Branch:
Type of work:
Communicate
Blueprint:

Starter:
Affected tool:
Deliverable for:
299


Subtasks


Related issues

Related to Tails - Bug #15733: Unlocking TCRYPT volume sometimes shows a confusing error message Resolved 2018-07-16

History

#1 Updated by segfault 2018-07-31 09:14:44

  • Subject changed from Some volumes require admin password to unlock to Some VeraCrypt volumes require admin password to unlock

#2 Updated by segfault 2018-07-31 09:18:59

I was not able to reproduce this issue - it does not happen with the file containers and the USB stick I use for testing.

#3 Updated by intrigeri 2018-08-09 10:36:56

  • Type of work changed from Research to Communicate

Maybe ping the bug reporter and ask help desk if they’ve received anything?

#4 Updated by segfault 2018-08-25 12:48:28

  • Description updated

#5 Updated by segfault 2018-09-04 09:34:08

  • Target version changed from Tails_3.9 to Tails_3.10.1

#6 Updated by intrigeri 2018-09-05 08:16:29

  • Description updated

#7 Updated by intrigeri 2018-09-05 08:17:27

If you don’t manage to gather enough debugging info to understand (and ideally, fix) this bug, perhaps the best we can do is to document the workaround.

#8 Updated by segfault 2018-10-23 22:43:59

  • Target version changed from Tails_3.10.1 to Tails_3.11

#9 Updated by intrigeri 2018-10-31 15:56:07

intrigeri wrote:
> If you don’t manage to gather enough debugging info to understand (and ideally, fix) this bug, perhaps the best we can do is to document the workaround.

Let’s decide something, please :)

#10 Updated by intrigeri 2018-11-06 12:29:20

  1. ask reporters to reproduce on 3.10.1
  2. try to reproduce with a non-removable USB stick

If none of these bring us a reproducer, close.

#11 Updated by segfault 2018-11-06 14:45:49

  • related to Bug #15733: Unlocking TCRYPT volume sometimes shows a confusing error message added

#12 Updated by segfault 2018-11-06 14:50:46

  • Tracker changed from Feature to Bug

intrigeri wrote:
> # try to reproduce with a non-removable USB stick

I was not able to reproduce with a non-removable USB stick. But I noticed something else (or actually, remembered something I had already noticed, but forgot to document): The user will get prompted for an admin password if they try to mount a volume for which the timeout exceeded during unlocking (see Bug #15733). When this happens, udisks does not store the UID which unlocked the volume, so it doesn’t know that the user is allowed to mount it.

So it might be that only users which were affected by Bug #15733 were affected by this.

#13 Updated by segfault 2018-11-06 15:05:53

> ask reporters to reproduce on 3.10.1

I sent an email to the three reporters listed in the description and asked them to reproduce this on 3.10.1.

#14 Updated by intrigeri 2018-11-07 10:39:13

> I was not able to reproduce with a non-removable USB stick. But I noticed something else (or actually, remembered something I had already noticed, but forgot to document): The user will get prompted for an admin password if they try to mount a volume for which the timeout exceeded during unlocking (see Bug #15733). When this happens, udisks does not store the UID which unlocked the volume, so it doesn’t know that the user is allowed to mount it.

OK, good to know!

> I sent an email to the three reporters listed in the description and asked them to reproduce this on 3.10.1.

Great. Let’s close as resolved unless there are new failure reports or these folks report they can reproduce on 3.10.1 by Nov 18.

#15 Updated by intrigeri 2018-11-12 08:28:16

  • Status changed from Confirmed to In Progress
  • % Done changed from 0 to 80

#16 Updated by segfault 2018-11-25 22:43:06

segfault wrote:
> I sent an email to the three reporters listed in the description and asked them to reproduce this on 3.10.1.

So far, two of the three reporters replied to my request: One can still reproduce their issue with 3.10.1, the other one can’t. I got a whisperback report from the first one, I will see if I can figure out their problem from the logs.

#17 Updated by segfault 2018-12-15 12:27:05

segfault wrote:
> So far, two of the three reporters replied to my request: One can still reproduce their issue with 3.10.1, the other one can’t. I got a whisperback report from the first one, I will see if I can figure out their problem from the logs.

The whisperback report showed that the user didn’t actually try any of the supported ways to unlock a VeraCrypt volume, but used the VeraCrypt application. They didn’t reply back to my request to try it with a supported method.

So of all the users who reported issues with volumes requiring an admin password (it were actually four, not three) one tried it again in 3.10.1 and didn’t encounter the issue anymore.

#18 Updated by CyrilBrulebois 2018-12-16 13:59:09

  • Target version changed from Tails_3.11 to Tails_3.12

#19 Updated by anonym 2019-01-30 11:59:17

  • Target version changed from Tails_3.12 to Tails_3.13

#20 Updated by intrigeri 2019-02-23 14:49:02

  • Status changed from In Progress to Resolved
  • Assignee deleted (segfault)
  • % Done changed from 80 to 100

Two months later, I’m closing this as fixed or unreproducible.

Please reopen if you have more info.