morpheusthewhite / nordpy

A gui application to connect automatically to the recommended NordVPN server
GNU General Public License v3.0
105 stars 16 forks source link

Unnecessary calling of `sudo ipsec status` and `sudo ipsec --version` on Arch... #54

Closed n8jadams closed 2 years ago

n8jadams commented 2 years ago

I'm on Arch linux with KDE Plasma and I'm using these two repos for the AUR: https://aur.archlinux.org/packages/nordpy/ https://aur.archlinux.org/packages/nordpy-plasmoid-git/

Describe the bug I ran into a weird problem where I would experience a pam faillock because of this app. You can see some back and forth details on this thread on the Arch linux forums.

Ultimately, it looks like the following commands get called fairly frequently by nordpy in the background

sudo ipsec status
sudo ipsec --version

despite the fact that I hadn't installed strongswan.

This seemed to cause the pam faillock. When I added a NOPASSWD: /usr/bin/ipsec to my user in my sudoers file, the problem went away.

It seems that nord py

Desktop (please complete the following information):

I don't know if other Arch users have run into this or if it's just due to a configuration on my own machine, but hopefully this report is helpful. I really appreciate this GUI and it has a ton of potential for us non-windows/mac users. :)

morpheusthewhite commented 2 years ago

Thanks for the report. I didn't experience it, even if I am also on Arch.

If you can try to run the patched version let me know if you continue experiencing the same problem.

n8jadams commented 2 years ago

Thanks, that seemed to have fixed it. Will you be making a new version number with this patch?

morpheusthewhite commented 2 years ago

I'll do as soon as I correct another problem related to ikev2