[CentOS] polkit helper timeout and defunct pkla-check-authorization processes on CentOS 7.3

Fri Mar 10 18:01:22 UTC 2017
Edgecombe, Jason <jwedgeco at uncc.edu>

Hi everyone,

We seem to be having issues on multiple CentOS 7.3 machines. The problem
seems to revolve around polkitd. At some random time, polkitd seems to stop
responding on my systems. Along with this, there might be hundreds of
defunct pkla-check-authorization processes. If I reboot, then things are
fine for a while.

I don't see any activity in the unabridged journal to suggest anything that
might be triggering polkitd. The puppet run finished 5 minutes before
polkitd lost it's head.

polkit version is polkit-0.112-11.el7_3.x86_64

Any help is appreciated.

Thanks,
Jason

Here is some condensed output from the "journalctl -u polkit" command:
Mar 09 04:02:14 myhost systemd[1]: Starting Authorization Manager...
Mar 09 04:02:14 myhost polkitd[1018]: Started polkitd version 0.112
Mar 09 04:02:14 myhost polkitd[1018]: Loading rules from directory
/etc/polkit-1/rules.d
Mar 09 04:02:14 myhost polkitd[1018]: Loading rules from directory
/usr/share/polkit-1/rules.d
Mar 09 04:02:14 myhost polkitd[1018]: Finished loading, compiling and
executing 7 rules
Mar 09 04:02:14 myhost systemd[1]: Started Authorization Manager.
Mar 09 04:02:14 myhost polkitd[1018]: Acquired the name
org.freedesktop.PolicyKit1 on the system bus
Mar 09 04:02:53 myhost polkitd[1018]: Registered Authentication Agent for
unix-session:c1 (system bus name :1.41 [gnome-shell --mode=gdm], object
path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8)
Mar 09 04:08:25 myhost polkitd[1018]: Reloading rules
Mar 09 04:08:25 myhost polkitd[1018]: Collecting garbage unconditionally...
Mar 09 04:08:25 myhost polkitd[1018]: Loading rules from directory
/etc/polkit-1/rules.d
Mar 09 04:08:25 myhost polkitd[1018]: Loading rules from directory
/usr/share/polkit-1/rules.d
Mar 09 04:08:25 myhost polkitd[1018]: Finished loading, compiling and
executing 8 rules
Mar 09 04:08:25 myhost polkitd[1018]: Reloading rules
Mar 09 04:08:25 myhost polkitd[1018]: Collecting garbage unconditionally...
Mar 09 04:08:25 myhost polkitd[1018]: Loading rules from directory
/etc/polkit-1/rules.d
Mar 09 04:08:25 myhost polkitd[1018]: Loading rules from directory
/usr/share/polkit-1/rules.d
Mar 09 04:08:25 myhost polkitd[1018]: Finished loading, compiling and
executing 8 rules
Mar 09 04:08:53 myhost polkitd[1018]: Reloading rules
... (snipped more rules loading)
Mar 09 04:10:39 myhost polkitd[1018]: Collecting garbage unconditionally...
Mar 09 04:10:39 myhost polkitd[1018]: Loading rules from directory
/etc/polkit-1/rules.d
Mar 09 04:10:39 myhost polkitd[1018]: Loading rules from directory
/usr/share/polkit-1/rules.d
Mar 09 04:10:39 myhost polkitd[1018]: Finished loading, compiling and
executing 7 rules
Mar 09 16:59:42 myhost polkitd[1018]:
/etc/polkit-1/rules.d/49-polkit-pkla-compat.rules:21: Error: Error spawning
helper: Timed out after 10 seconds (g-io-error-quark, 24)
Mar 09 16:59:42 myhost polkitd[1018]: Error evaluating authorization rules
Mar 10 04:13:34 myhost polkitd[1018]:
/etc/polkit-1/rules.d/49-polkit-pkla-compat.rules:21: Error: Error spawning
helper: Timed out after 10 seconds (g-io-error-quark, 24)
Mar 10 04:13:34 myhost polkitd[1018]: Error evaluating authorization rules
Mar 10 04:14:32 myhost polkitd[1018]:
/etc/polkit-1/rules.d/49-polkit-pkla-compat.rules:21: Error: Error spawning
helper: Timed out after 10 seconds (g-io-error-quark, 24)
... (snipped more lines about error evaluating rules)...

---------------------------------------------------------------------------
Jason Edgecombe | Linux Administrator
UNC Charlotte | The William States Lee College of Engineering
9201 University City Blvd. | Charlotte, NC 28223-0001
Phone: 704-687-1943
jwedgeco at uncc.edu | http://engr.uncc.edu |  Facebook
---------------------------------------------------------------------------
If you are not the intended recipient of this transmission or a person
responsible for delivering it to the intended recipient, any disclosure,
copying, distribution, or other use of any of the information in this
transmission is strictly prohibited. If you have received this transmission
in error, please notify me immediately by reply e-mail or by telephone at
704-687-1943.  Thank you.