secureblue / secureblue

Fedora Atomic images for GNOME, KDE Plasma, Bluefin, Sway, Cinnamon, Wayfire, River, and Hyprland with some hardening applied

Home Page:https://github.com/secureblue/secureblue/wiki

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

[BUG] Issue activating the fingerprint reader

techie6 opened this issue · comments

Describe the bug
My Dell XPS 9500 has a fingerprint reader which works fine on Fedora 39 Kinoite using the driver in the following repo:
https://copr.fedorainfracloud.org/coprs/manciukic/libfprint-tod-goodix

However, when I rebase my Fedora to SecureBlue (kinoite-nvidia-userns-hardened), the fingerprint reader gets disconnected and it does not function no matter what I do. I tried disabling the hardened kargs, but that did not make any difference. Any ideas?

Expected behavior when adding a fingerprint:
image

Actual behavior when adding a fingerprint (The existing one was added in Fedora 39 Kinoite):
image
image

can you post the output of ujust check-local-overrides

Here you go:

admin@fedora:/var/home/admin$ ujust check-local-overrides
diff -r --suppress-common-lines '--color=always' --exclude 'passwd*' --exclude 'group*' '--exclude=subgid*' '--exclude=subuid*' '--exclude=machine-id' '--exclude=adjtime' '--exclude=fstab' '--exclude=system-connections' '--exclude=shadow*' '--exclude=gshadow*' '--exclude=ssh_host*' '--exclude=cmdline' '--exclude=crypttab' '--exclude=hostname' '--exclude=localtime' '--exclude=locale*' '--exclude=*lock' '--exclude=.updated' '--exclude=*LOCK' '--exclude=vconsole*' '--exclude=00-keyboard.conf' '--exclude=grub' '--exclude=system.control*' '--exclude=cdi' '--exclude=default.target' /usr/etc/authselect/authselect.conf /etc/authselect/authselect.conf
4c4
< with-faillock
---
> with-fingerprint
diff -r --suppress-common-lines '--color=always' --exclude 'passwd*' --exclude 'group*' '--exclude=subgid*' '--exclude=subuid*' '--exclude=machine-id' '--exclude=adjtime' '--exclude=fstab' '--exclude=system-connections' '--exclude=shadow*' '--exclude=gshadow*' '--exclude=ssh_host*' '--exclude=cmdline' '--exclude=crypttab' '--exclude=hostname' '--exclude=localtime' '--exclude=locale*' '--exclude=*lock' '--exclude=.updated' '--exclude=*LOCK' '--exclude=vconsole*' '--exclude=00-keyboard.conf' '--exclude=grub' '--exclude=system.control*' '--exclude=cdi' '--exclude=default.target' /usr/etc/authselect/dconf-db /etc/authselect/dconf-db
8c8
< enable-fingerprint-authentication=false
---
> enable-fingerprint-authentication=true
diff -r --suppress-common-lines '--color=always' --exclude 'passwd*' --exclude 'group*' '--exclude=subgid*' '--exclude=subuid*' '--exclude=machine-id' '--exclude=adjtime' '--exclude=fstab' '--exclude=system-connections' '--exclude=shadow*' '--exclude=gshadow*' '--exclude=ssh_host*' '--exclude=cmdline' '--exclude=crypttab' '--exclude=hostname' '--exclude=localtime' '--exclude=locale*' '--exclude=*lock' '--exclude=.updated' '--exclude=*LOCK' '--exclude=vconsole*' '--exclude=00-keyboard.conf' '--exclude=grub' '--exclude=system.control*' '--exclude=cdi' '--exclude=default.target' /usr/etc/authselect/fingerprint-auth /etc/authselect/fingerprint-auth
6c6,23
< auth required pam_debug.so auth=authinfo_unavail
---
> auth        required                                     pam_env.so
> auth        [success=done default=bad]                   pam_fprintd.so
> auth        required                                     pam_deny.so
> 
> account     required                                     pam_unix.so
> account     sufficient                                   pam_localuser.so
> account     sufficient                                   pam_usertype.so issystem
> account     [default=bad success=ok user_unknown=ignore] pam_sss.so
> account     required                                     pam_permit.so
> 
> password    required                                     pam_deny.so
> 
> session     optional                                     pam_keyinit.so revoke
> session     required                                     pam_limits.so
> -session    optional                                     pam_systemd.so
> session     [success=1 default=ignore]                   pam_succeed_if.so service in crond quiet use_uid
> session     required                                     pam_unix.so
> session     optional                                     pam_sss.so
diff -r --suppress-common-lines '--color=always' --exclude 'passwd*' --exclude 'group*' '--exclude=subgid*' '--exclude=subuid*' '--exclude=machine-id' '--exclude=adjtime' '--exclude=fstab' '--exclude=system-connections' '--exclude=shadow*' '--exclude=gshadow*' '--exclude=ssh_host*' '--exclude=cmdline' '--exclude=crypttab' '--exclude=hostname' '--exclude=localtime' '--exclude=locale*' '--exclude=*lock' '--exclude=.updated' '--exclude=*LOCK' '--exclude=vconsole*' '--exclude=00-keyboard.conf' '--exclude=grub' '--exclude=system.control*' '--exclude=cdi' '--exclude=default.target' /usr/etc/authselect/password-auth /etc/authselect/password-auth
8d7
< auth        required                                     pam_faillock.so preauth silent
14d12
< auth        required                                     pam_faillock.so authfail
17d14
< account     required                                     pam_faillock.so
diff -r --suppress-common-lines '--color=always' --exclude 'passwd*' --exclude 'group*' '--exclude=subgid*' '--exclude=subuid*' '--exclude=machine-id' '--exclude=adjtime' '--exclude=fstab' '--exclude=system-connections' '--exclude=shadow*' '--exclude=gshadow*' '--exclude=ssh_host*' '--exclude=cmdline' '--exclude=crypttab' '--exclude=hostname' '--exclude=localtime' '--exclude=locale*' '--exclude=*lock' '--exclude=.updated' '--exclude=*LOCK' '--exclude=vconsole*' '--exclude=00-keyboard.conf' '--exclude=grub' '--exclude=system.control*' '--exclude=cdi' '--exclude=default.target' /usr/etc/authselect/system-auth /etc/authselect/system-auth
8c8
< auth        required                                     pam_faillock.so preauth silent
---
> auth        sufficient                                   pam_fprintd.so
14d13
< auth        required                                     pam_faillock.so authfail
17d15
< account     required                                     pam_faillock.so
Only in /etc/cups: subscriptions.conf.O
Only in /etc/modprobe.d: 99-bluetooth.conf
Only in /etc: .rpm-ostree-shadow-mode-fixed.stamp
Only in /etc/sysconfig: anaconda
Only in /etc/sysconfig: network
Only in /usr/etc/systemd/system/sysinit.target.wants: dmraid-activation.service
Only in /etc/yum.repos.d: manciukic-libfprint-tod-goodix-fedora-39.repo
admin@fedora:/var/home/admin$ 

strange. the overrides present here keep fingerprint login enabled:

> auth        sufficient                                   pam_fprintd.so

can you gather more details from fprintd:

journalctl -u fprintd

Here are the logs:

-- Boot 7193d0626a6d4aac98ac9ec5bdf6289a --
Apr 22 19:57:19 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 19:57:20 fedora fprintd[6958]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 22 19:57:24 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 19:57:54 fedora systemd[1]: fprintd.service: Deactivated successfully.
Apr 22 19:58:41 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 19:58:41 fedora fprintd[7133]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 22 19:58:41 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 19:59:11 fedora systemd[1]: fprintd.service: Deactivated successfully.
Apr 22 20:01:24 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 20:01:24 fedora fprintd[7910]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 22 20:01:24 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 20:01:54 fedora systemd[1]: fprintd.service: Deactivated successfully.
Apr 22 20:02:40 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 20:02:40 fedora fprintd[8076]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 22 20:02:41 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 20:03:11 fedora systemd[1]: fprintd.service: Deactivated successfully.
Apr 22 20:03:14 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 20:03:14 fedora fprintd[8204]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 22 20:03:15 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 20:03:45 fedora systemd[1]: fprintd.service: Deactivated successfully.
-- Boot d0c788d2144f487283b23bedf9cdebe4 --
Apr 22 20:11:29 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 20:11:29 fedora fprintd[7244]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 22 20:11:30 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 20:12:00 fedora systemd[1]: fprintd.service: Deactivated successfully.
Apr 22 20:13:07 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 20:13:07 fedora fprintd[7379]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 22 20:13:08 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 20:13:38 fedora systemd[1]: fprintd.service: Deactivated successfully.
-- Boot e59d6e1d25e84d3ea05096c1bb690f8d --
Apr 22 20:17:15 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 20:17:15 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 20:17:45 fedora systemd[1]: fprintd.service: Deactivated successfully.
Apr 22 20:19:10 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 20:19:10 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 20:19:40 fedora systemd[1]: fprintd.service: Deactivated successfully.
Apr 22 20:20:24 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 20:20:24 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 20:20:54 fedora systemd[1]: fprintd.service: Deactivated successfully.
Apr 22 20:22:00 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 20:22:00 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 20:22:30 fedora systemd[1]: fprintd.service: Deactivated successfully.
-- Boot ee54d64ac5a8404380e79da6e0897c44 --
Apr 22 20:25:14 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 20:25:14 fedora fprintd[6401]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 22 20:25:15 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 20:25:17 fedora fprintd[6401]: Authorization denied to :1.90 to call method 'Release' for device 'Goodix Fingerprint Sensor 53xc': Device was not claimed bef>
Apr 22 20:25:22 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 22 20:25:22 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.
Apr 22 20:25:45 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 20:25:46 fedora fprintd[6654]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 22 20:25:46 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 20:25:47 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 22 20:25:47 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.
Apr 22 20:26:32 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 20:26:32 fedora fprintd[7254]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 22 20:26:33 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 20:26:33 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 22 20:26:33 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.
Apr 22 20:29:02 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 20:29:02 fedora fprintd[7443]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 22 20:29:02 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 20:29:24 fedora fprintd[7443]: Authorization denied to :1.90 to call method 'EnrollStop' for device 'Goodix Fingerprint Sensor 53xc': Device was not claimed >
Apr 22 20:29:24 fedora fprintd[7443]: Authorization denied to :1.90 to call method 'Release' for device 'Goodix Fingerprint Sensor 53xc': Device was not claimed bef>
Apr 22 20:29:32 fedora systemd[1]: fprintd.service: Deactivated successfully.
-- Boot 738e13ad5aab4888ae7e1fa37d5ad606 --
Apr 22 20:37:31 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 20:37:31 fedora fprintd[3035]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 22 20:37:31 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 20:37:34 fedora fprintd[3035]: Authorization denied to :1.95 to call method 'Release' for device 'Goodix Fingerprint Sensor 53xc': Device was not claimed bef>
Apr 22 20:37:46 fedora fprintd[3035]: Goodix Fingerprint Sensor 53xc does not support identify with empty gallery, let's skip it
Apr 22 20:38:51 fedora fprintd[3035]: Authorization denied to :1.95 to call method 'EnrollStop' for device 'Goodix Fingerprint Sensor 53xc': Device was not claimed >
Apr 22 20:38:51 fedora fprintd[3035]: Authorization denied to :1.95 to call method 'Release' for device 'Goodix Fingerprint Sensor 53xc': Device was not claimed bef>
Apr 22 20:39:31 fedora fprintd[3035]: Authorization denied to :1.104 to call method 'Release' for device 'Goodix Fingerprint Sensor 53xc': Device was not claimed be>
Apr 22 20:39:36 fedora fprintd[3035]: Authorization denied to :1.105 to call method 'Claim' for device 'Goodix Fingerprint Sensor 53xc': Device was already claimed
Apr 22 20:40:21 fedora fprintd[3035]: Authorization denied to :1.104 to call method 'EnrollStart' for device 'Goodix Fingerprint Sensor 53xc': Not Authorized: net.r>
Apr 22 20:41:22 fedora fprintd[3035]: Authorization denied to :1.104 to call method 'Release' for device 'Goodix Fingerprint Sensor 53xc': Device was not claimed be>
Apr 22 20:41:29 fedora fprintd[3035]: Authorization denied to :1.106 to call method 'Claim' for device 'Goodix Fingerprint Sensor 53xc': Device was already claimed
Apr 22 20:41:49 fedora fprintd[3035]: Authorization denied to :1.104 to call method 'EnrollStart' for device 'Goodix Fingerprint Sensor 53xc': Not Authorized: net.r>
Apr 22 20:43:25 fedora fprintd[3035]: Authorization denied to :1.104 to call method 'EnrollStop' for device 'Goodix Fingerprint Sensor 53xc': Device was not claimed>
Apr 22 20:43:25 fedora fprintd[3035]: Authorization denied to :1.104 to call method 'Release' for device 'Goodix Fingerprint Sensor 53xc': Device was not claimed be>
Apr 22 20:43:55 fedora systemd[1]: fprintd.service: Deactivated successfully.
Apr 22 20:43:55 fedora systemd[1]: fprintd.service: Consumed 5.335s CPU time.
-- Boot ce1f05f19c6d439781696dacbb9928af --
Apr 22 20:56:42 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 20:56:42 fedora fprintd[6791]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 22 20:56:43 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 20:56:45 fedora fprintd[6791]: Authorization denied to :1.99 to call method 'Release' for device 'Goodix Fingerprint Sensor 53xc': Device was not claimed bef>
Apr 22 20:56:52 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 22 20:56:52 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.
Apr 22 20:57:10 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 20:57:10 fedora fprintd[7082]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 22 20:57:11 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 20:57:11 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 22 20:57:11 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.
Apr 22 20:57:59 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 20:57:59 fedora fprintd[7154]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 22 20:58:00 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 20:58:00 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 22 20:58:00 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.
Apr 22 20:58:05 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 20:58:05 fedora fprintd[7177]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 22 20:58:05 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 20:58:05 fedora fprintd[7177]: Authorization denied to :1.99 to call method 'Release' for device 'Goodix Fingerprint Sensor 53xc': Device was not claimed bef>
Apr 22 20:58:11 fedora fprintd[7177]: Authorization denied to :1.99 to call method 'Release' for device 'Goodix Fingerprint Sensor 53xc': Device was not claimed bef>
Apr 22 20:58:16 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 22 20:58:16 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.
Apr 22 21:04:25 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 21:04:25 fedora fprintd[8042]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 22 21:04:26 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 21:04:26 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 22 21:04:26 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.
-- Boot cb73593d91b14b9c84b6dab9c5ca6bd1 --
Apr 22 21:08:52 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 21:08:53 fedora fprintd[6481]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 22 21:08:53 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 21:08:56 fedora fprintd[6481]: Authorization denied to :1.84 to call method 'Release' for device 'Goodix Fingerprint Sensor 53xc': Device was not claimed bef>
Apr 22 21:09:00 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 22 21:09:00 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.
Apr 22 21:09:07 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 21:09:07 fedora fprintd[6731]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 22 21:09:08 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 21:09:08 fedora fprintd[6731]: Authorization denied to :1.84 to call method 'Release' for device 'Goodix Fingerprint Sensor 53xc': Device was not claimed bef>
Apr 22 21:09:12 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 22 21:09:12 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.
Apr 22 21:09:35 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 21:09:35 fedora fprintd[6919]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 22 21:09:36 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 21:09:36 fedora fprintd[6919]: Authorization denied to :1.84 to call method 'EnrollStop' for device 'Goodix Fingerprint Sensor 53xc': Device was not claimed >
Apr 22 21:09:36 fedora fprintd[6919]: Authorization denied to :1.84 to call method 'Release' for device 'Goodix Fingerprint Sensor 53xc': Device was not claimed bef>
Apr 22 21:10:06 fedora systemd[1]: fprintd.service: Deactivated successfully.
Apr 22 21:14:55 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 21:14:55 fedora fprintd[7601]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 22 21:14:56 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 21:14:56 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 22 21:14:56 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.
Apr 22 21:15:09 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 21:19:30 fedora fprintd[7693]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 22 21:19:30 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 21:19:31 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 22 21:19:31 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.
Apr 22 21:20:10 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 21:20:10 fedora fprintd[7768]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 22 21:20:11 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 21:20:11 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 22 21:20:11 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.
Apr 22 21:20:38 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 21:20:38 fedora fprintd[7990]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 22 21:20:39 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 21:20:39 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 22 21:20:39 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.
Apr 22 21:20:41 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 21:20:42 fedora fprintd[8016]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 22 21:20:42 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 21:20:55 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 22 21:20:55 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.
Apr 22 21:51:55 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 21:51:55 fedora fprintd[9129]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 22 21:51:56 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 21:51:56 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 22 21:51:56 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.
Apr 22 23:53:49 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 22 23:53:49 fedora fprintd[14813]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 22 23:53:50 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 22 23:53:50 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 22 23:53:50 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.

The segv makes me think this could be hardened_malloc related.

Can you try adding this and then restarting fprintd:

[Service]
Environment=LD_PRELOAD=libhardened_malloc-light.so

to /etc/systemd/system/fprintd.service.d/preload.conf

It didn't seem to make a difference unfortunately :(

admin@fedora:/var/home/admin$ sudo cat /etc/systemd/system/fprintd.service.d/preload.conf
[Service]
Environment=LD_PRELOAD=libhardened_malloc-light.so

admin@fedora:/var/home/admin$ systemctl restart fprintd

admin@fedora:/var/home/admin$ fprintd-enroll
Using device /net/reactivated/Fprint/Device/0
failed to claim device: GDBus.Error:org.freedesktop.DBus.Error.NoReply: Remote peer disconnected

admin@fedora:/var/home/admin$ journalctl -u fprintd
Apr 23 03:04:38 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 23 03:04:38 fedora fprintd[15768]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 23 03:04:39 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 23 03:04:39 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 23 03:04:39 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.
Apr 23 03:04:45 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 23 03:04:45 fedora fprintd[15828]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 23 03:04:45 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 23 03:04:46 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 23 03:04:46 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.
Apr 23 03:33:26 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 23 03:33:26 fedora fprintd[16764]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 23 03:33:27 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 23 03:33:28 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 23 03:33:28 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.
Apr 23 03:34:31 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 23 03:34:31 fedora fprintd[16842]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 23 03:34:32 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 23 03:34:32 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 23 03:34:32 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.
Apr 23 03:34:44 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 23 03:34:44 fedora fprintd[16859]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 23 03:34:44 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 23 03:34:45 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 23 03:34:45 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.
Apr 23 03:38:50 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 23 03:38:50 fedora fprintd[16949]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 23 03:38:51 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 23 03:38:51 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 23 03:38:51 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.
Apr 23 03:38:53 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 23 03:38:54 fedora fprintd[16978]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 23 03:38:54 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 23 03:39:24 fedora systemd[1]: fprintd.service: Deactivated successfully.
Apr 23 03:40:38 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 23 03:40:38 fedora fprintd[17097]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 23 03:40:39 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 23 03:40:41 fedora fprintd[17097]: Authorization denied to :1.311 to call method 'Release' for device 'Goodix Fingerprint Sensor 53xc': Device was not claimed b>
Apr 23 03:40:47 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 23 03:40:47 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.
Apr 23 03:41:55 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 23 03:41:55 fedora fprintd[17376]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 23 03:41:56 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 23 03:41:56 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 23 03:41:56 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.
Apr 23 03:42:01 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 23 03:42:01 fedora fprintd[17402]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 23 03:42:02 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 23 03:42:32 fedora systemd[1]: fprintd.service: Deactivated successfully.
Apr 23 03:42:39 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 23 03:42:39 fedora fprintd[17494]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 23 03:42:40 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 23 03:42:40 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 23 03:42:40 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.
Apr 23 03:42:47 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 23 03:42:47 fedora fprintd[17512]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 23 03:42:48 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 23 03:42:48 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 23 03:42:48 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.
Apr 23 03:43:30 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 23 03:43:30 fedora fprintd[17565]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 23 03:43:31 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 23 03:43:31 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 23 03:43:31 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.
Apr 23 03:43:34 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 23 03:43:34 fedora fprintd[17595]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 23 03:43:35 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 23 03:43:52 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 23 03:43:52 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.

hmm. can you try this?

[Service]
Environment=LD_PRELOAD=""

No difference :(

admin@fedora:/var/home/admin$ sudo cat /etc/systemd/system/fprintd.service.d/preload.conf
[Service]
Environment=LD_PRELOAD=""

admin@fedora:/var/home/admin$ systemctl restart fprintd
Warning: The unit file, source configuration file or drop-ins of fprintd.service changed on disk. Run 'systemctl daemon-reload' to reload units.
admin@fedora:/var/home/admin$ systemctl daemon-reload
admin@fedora:/var/home/admin$ 
admin@fedora:/var/home/admin$ fprintd-enroll
Using device /net/reactivated/Fprint/Device/0
failed to claim device: GDBus.Error:org.freedesktop.DBus.Error.NoReply: Remote peer disconnected

admin@fedora:/var/home/admin$ journalctl -u fprintd | tail
Apr 23 03:53:55 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 23 03:53:55 fedora fprintd[18355]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 23 03:53:56 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 23 03:53:56 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 23 03:53:56 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.
Apr 23 03:55:13 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
Apr 23 03:55:13 fedora fprintd[18378]: Creating TOD wrapper for goodix-tod (Goodix Fingerprint Sensor 53xc) driver
Apr 23 03:55:14 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
Apr 23 03:55:14 fedora systemd[1]: fprintd.service: Main process exited, code=dumped, status=11/SEGV
Apr 23 03:55:14 fedora systemd[1]: fprintd.service: Failed with result 'core-dump'.

hmm. it could be that the driver itself is still pulling in hardened_malloc

can you edit /etc/ld.so.preload

to just have

""

and then restart.

Then include this in your post:

cat /proc/1/maps | grep harden

And now the fingerprint reader magically works!

I guess you had to disable hardened_malloc system wide just to make the driver work, with no way around this?

admin@fedora:/var/home/admin$ sudo cat /proc/1/maps | grep harden
admin@fedora:/var/home/admin$ 

@techie6 that's great news. now can you try setting /etc/ld.so.preload to libhardened_malloc-light.so

and then rebooting

with no way around this?

the way around it is most likely to inform the developer of the driver that they have a memory bug in their driver, and wait for them to fix it.

now can you try setting /etc/ld.so.preload to libhardened_malloc-light.so

With libhardened_malloc-light.so in /etc/ld.so.preload, the driver stops working again.

admin@fedora:/var/home/admin$ sudo cat /proc/1/maps | grep harden
7f1603168000-7f160316a000 r--p 00000000 00:21 256987                     /usr/lib64/libhardened_malloc-light.so
7f160316a000-7f160316f000 r-xp 00002000 00:21 256987                     /usr/lib64/libhardened_malloc-light.so
7f160316f000-7f1603171000 r--p 00007000 00:21 256987                     /usr/lib64/libhardened_malloc-light.so
7f1603171000-7f1603172000 r--p 00008000 00:21 256987                     /usr/lib64/libhardened_malloc-light.so
7f1603172000-7f1603173000 rw-p 00009000 00:21 256987                     /usr/lib64/libhardened_malloc-light.so

the way around it is most likely to inform the developer of the driver that they have a memory bug in their driver, and wait for them to fix it.

The original developer of the closed-source Ubuntu-based fingerprint driver is Goodix, the chinese company who hasn't touched the driver in years. Just a few months ago though, the driver was luckily ported to Fedora and OpenSUSE by the community.

I'm guessing such a memory bug needs to be addressed by the original manufacturer of the driver, and cannot be corrected solely by the developers of the ported versions. Please correct me if I'm wrong.

I've also come to believe now that (hardened_malloc) cannot be excluded for specific drivers, and the only way around it is to to disable it completely system-wide. What a pity..

I've also come to believe now that (hardened_malloc) cannot be excluded for specific drivers, and the only way around it is to to disable it completely system-wide. What a pity..

I'm not aware of another way, but it may be possible. It might still be worth asking the package maintainers if they have ideas.