Not authorized to control networking

At some point (maybe 4.2 → 4.3) I lost the ability to click on the NetworkManager icon in the xfce panel and control networking, e.g. disconnect wifi or choose an SSID to connect to. When I try it, NetworkManager pops up a sys-net dialog box that says just “Not authorized to control networking”. Notably, use of NM running in an app qube on the same template does not similarly fail. My sys-net uses the fedora-43-xfce template. I have no sys-usb, and do not seem to have a separate GUI qube.

To control networking, I have to get up a root terminal in sys-net, and figure out which program to run from there. Is there a setting in sys-net to restore xfce panel-level control of network operations? E.g., add “user” to some line in /etc/group?

Use fedora-44-xfce as the TemplateVM and see if the issue is reproducible afterwards.

Thank you.

I upgraded fedora-43-xfce to fedora-44-xfce and made sys-net use that, but the problem persists. It seems likely a mis-configuration in 43 was copied into 44, but I don’t know how to identify it.

Do you have qubes-core-agent-passwordless-root installed in your template?

This might be related to minimal-usbvm feature. It disables some services not needed normally in sys-usb. But maybe, since you don’t have separate sys-usb, it got applied to sys-net?

Go to settings of sys-net, “services” tab and see if you have minimal-usbvm there. If yes, disable it and restart sys-net.

Thank you, unchecking minimal-usbvm did it!

I forgot to mention that I had tried using a sys-usb, but it didn’t seem to work well with the USB wifi dongle I have to use on this machine (in place of its soldered-in ath11k transceiver).