ivanGJ
December 19, 2025, 8:55am
1
I don’t think this is the first time that it happens. Suddenly the network manager is asking for all the Wi-Fi passwords in my house. Kmail tells me every email account is broken. I’m guessing other services that store passwords will probably be broken too.
I checked Kwallet, and everything seems… fine?
What happened? Is there a way to recover all that information? Must I fill it again?
Operating System: openSUSE Tumbleweed 20251217
KDE Plasma Version: 6.5.4
KDE Frameworks Version: 6.21.0
Qt Version: 6.10.1
Kernel Version: 6.18.1-1-default (64-bit)
Graphics Platform: Wayland
Processors: 8 × AMD Ryzen 5 2500U with Radeon Vega Mobile Gfx
Memory: 8 GiB of RAM (7.3 GiB usable)
Graphics Processor: llvmpipe
hui
December 19, 2025, 9:07am
2
Did you check that you have the right wallet choosen?
@ivanGJ :
Have you enabled SELinux?
Dez 19 09:24:44 (systemd)[1949]: pam_unix(systemd-user:session): session opened for user xxx(uid=1001) by xxx(uid=0)
Dez 19 09:24:44 (systemd)[1949]: pam_kwallet5(systemd-user:session): pam_kwallet5: not a graphical session, skipping. Use force_run parameter to ignore this.
Dez 19 09:24:44 systemd[1949]: Queued start job for default target Main User Target.
Dez 19 09:24:44 sddm-helper[1942]: pam_unix(sddm:session): session opened for user xxx(uid=1001) by xxx(uid=0)
Dez 19 09:24:44 systemd[1949]: Created slice User Application Slice.
Dez 19 09:24:44 sddm-helper[1942]: pam_kwallet5(sddm:session): pam_kwallet5: pam_sm_open_session
Dez 19 09:24:44 sddm-helper[1974]: pam_kwallet5: Couldn't create directory: /home/xxx because: 13-Keine Berechtigung
Dez 19 09:24:44 sddm-helper[1974]: pam_kwallet5: Couldn't open file: /home/xxx/.local/share/kwalletd/kdewallet.salt because: 13-Keine Berechtigung
Dez 19 09:24:44 sddm-helper[1942]: pam_kwallet5(sddm:session): pam_kwallet5: Couldn't create salt file
Dez 19 09:24:44 sddm-helper[1975]: pam_kwallet5: Failed to ensure /home/xxx/.local/share/kwalletd/kdewallet.salt looks like a salt file
Dez 19 09:24:44 systemd[1949]: Reached target Paths.
Dez 19 09:24:44 sddm-helper[1942]: pam_kwallet5(sddm:session): pam_kwallet5: Couldn't read salt file
Dez 19 09:24:44 systemd[1949]: Reached target Timers.
Dez 19 09:24:44 sddm-helper[1942]: pam_kwallet5-kwalletd: Couldn't create or read the salt file
Dez 19 09:24:44 systemd[1949]: Starting D-Bus User Message Bus Socket...
Dez 19 09:24:44 sddm-helper[1942]: pam_kwallet5(sddm:session): pam_kwallet5: Fail into creating the hash
Dez 19 09:24:44 systemd[1949]: Listening on GnuPG network certificate management daemon.
Dez 19 09:24:44 sddm-helper[1736]: pam_unix(sddm-greeter:session): session closed for user sddm
Dez 19 09:24:44 sddm-helper[1736]: pam_kwallet5(sddm-greeter:session): pam_kwallet5: pam_sm_close_session
You may have to simply set the password of the KWallet “kdewallet” to nothing – empty:
Simply open the “Change password” dialogue and hit “OK” – “Do it!” – without entering any password characters …
Further information is available in your SELinux Audit:
# ausearch -c 'sddm-helper' --raw
type=AVC msg=audit(1761734137.190:332): avc: denied { getattr } for pid=43640 comm="sddm-helper" path="/home01/yyy/.local/share/kwalletd/kdewallet.salt" dev="sdb3" ino=6442451460 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:default_t:s0 tclass=file permissive=0
type=AVC msg=audit(1761734137.190:333): avc: denied { remove_name } for pid=43640 comm="sddm-helper" name="kdewallet.salt" dev="sdb3" ino=6442451460 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:default_t:s0 tclass=dir permissive=0
type=AVC msg=audit(1761734137.190:334): avc: denied { write } for pid=43640 comm="sddm-helper" name="kdewallet.salt" dev="sdb3" ino=6442451460 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:default_t:s0 tclass=file permissive=0
type=AVC msg=audit(1761734137.195:335): avc: denied { getattr } for pid=43641 comm="sddm-helper" path="/home01/yyy/.local/share/kwalletd/kdewallet.salt" dev="sdb3" ino=6442451460 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:default_t:s0 tclass=file permissive=0
type=AVC msg=audit(1761734137.353:337): avc: denied { add_name } for pid=43642 comm="sddm-helper" name="wayland-session.log" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:default_t:s0 tclass=dir permissive=0
type=AVC msg=audit(1761734137.354:338): avc: denied { write } for pid=43642 comm="sddm-helper" name="wayland-session.log" dev="sdb3" ino=630 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:default_t:s0 tclass=file permissive=0
type=AVC msg=audit(1761758848.417:309): avc: denied { getattr } for pid=6365 comm="sddm-helper" path="/home01/yyy/.local/share/kwalletd/kdewallet.salt" dev="sdb3" ino=6442451460 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:default_t:s0 tclass=file permissive=0
type=AVC msg=audit(1761758848.417:310): avc: denied { remove_name } for pid=6365 comm="sddm-helper" name="kdewallet.salt" dev="sdb3" ino=6442451460 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:default_t:s0 tclass=dir permissive=0
type=AVC msg=audit(1761758848.417:311): avc: denied { write } for pid=6365 comm="sddm-helper" name="kdewallet.salt" dev="sdb3" ino=6442451460 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:default_t:s0 tclass=file permissive=0
.
.
.
#
I’m currently trying to investigate this issue properly and will eventually raise a Bug Report in the New Year.
Once I’ve worked out how to formulate the Bug Report’s content.
I’ve tried the suggested SELinux actions to produce a new Security definition but, haven’t had any success to date.
ivanGJ
December 19, 2025, 10:30am
4
I only have one wallet.kdewallet empty for autologin purposes (disk is already encrypted).
I don’t know how to search for those messages in the journal.
To display messages from the journal:sudo journalctlsudo journalctl --since yesterday -p 4
Files below /home are not expected to have this label. It looks like SELinux labels were not applied.
Thanks Andrei – that’s what I’ve been looking for:
> ls -dlZ .local
drwx------. 5 xxx xxx system_u:object_r:user_home_t:s0 43 3. Nov 10:02 .local
> ls -dlZ .local/share
drwx------. 79 xxx xxx system_u:object_r:user_home_t:s0 4096 19. Dez 15:14 .local/share
> ls -dlZ .local/share/kwalletd
drwx-----T. 2 xxx xxx system_u:object_r:user_home_t:s0 155 19. Dez 10:09 .local/share/kwalletd
> ls -dlZ .local/share/kwalletd/*
-rw-------. 1 xxx xxx unconfined_u:object_r:user_home_t:s0 19706 15. Dez 14:54 .local/share/kwalletd/Benutzer_attributes.json
-rw-------. 1 xxx xxx unconfined_u:object_r:user_home_t:s0 7970 19. Dez 10:09 .local/share/kwalletd/Benutzer.kwl
-rw-------. 1 xxx xxx unconfined_u:object_r:user_home_t:s0 56 15. Dez 15:30 .local/share/kwalletd/Benutzer.salt
-rw-------. 1 xxx xxx unconfined_u:object_r:user_home_t:s0 7091 15. Dez 14:50 .local/share/kwalletd/kdewallet_attributes.json
-rw-------. 1 xxx xxx unconfined_u:object_r:user_home_t:s0 1408 19. Dez 09:24 .local/share/kwalletd/kdewallet.kwl
-rw-------. 1 xxx xxx unconfined_u:object_r:user_home_t:s0 56 15. Dez 14:51 .local/share/kwalletd/kdewallet.salt
>
Searching for SELinux help on the Internet resulted in a suggestion that means, I’ll have to look into the “restorecon ” command to restore the default SELinux security contexts …
If I’m headed in the wrong direction, please tell me.
ivanGJ
December 23, 2025, 5:58pm
8
After a couple of system reboots, it started working again. I did some akonadictl fsck and akonadictl restart commands to clean things up in the middle of things, but I don’t really think these were the things that made it work again.
Maybe I also updated some system libraries or something… I am not sure. Sorry.