Upgrade to 4.1 denies VMRootShell to mgmt VM when updating Whonix WS

[tetrahedras]

Qubes OS release

4.1

Brief summary

When attempting to update the Whonix WS template (via QubesUpdater or $ sudo qubesctl --show-output --skip-dom0 --templates state.sls update.qubes-vm) the update fails with the user notification pop-up:

Denied qubes.VMRootShell from disp-mgmt-whonix-ws-16 to whonix-ws-16

and the console log entry

whonix-ws-16:
      ----------
      _error:
          Failed to return clean data
      retcode:
          126
      stderr:
          Request refused
      stdout:

If I run apt update and apt upgrade on the template manually, it works fine.

Updates of non-Whonix templates also work fine.

It looks like there is a qrexec configuration issue specific to this one template, but I'm not sure where to go looking for it.

[marmarek]

Duplicate of #7122

[andrewdavidwong]

This appears to be a duplicate of an existing issue. If so, please comment on the appropriate existing issue instead. If anyone believes this is not really a duplicate, please leave a comment briefly explaining why. We'll be happy to take another look and, if appropriate, reopen this issue. Thank you.

[qubesos-bot]

Automated announcement from builder-github

The package mgmt-salt has been pushed to the r4.1 testing repository for the CentOS centos-stream8 template.
To test this update, please install it with the following command:

sudo yum update --enablerepo=qubes-vm-r4.1-current-testing

Changes included in this update

[qubesos-bot]

Automated announcement from builder-github

The component mgmt-salt (including package qubes-mgmt-salt-4.1.14-1.fc32) has been pushed to the r4.1 testing repository for dom0.
To test this update, please install it with the following command:

sudo qubes-dom0-update --enablerepo=qubes-dom0-current-testing

Changes included in this update

[qubesos-bot]

Automated announcement from builder-github

The package mgmt-salt has been pushed to the r4.1 stable repository for the CentOS centos-stream8 template.
To install this update, please use the standard update command:

sudo yum update

Changes included in this update

[qubesos-bot]

Automated announcement from builder-github

The component mgmt-salt (including package qubes-mgmt-salt-4.1.14-1.fc32) has been pushed to the r4.1 stable repository for dom0.
To install this update, please use the standard update command:

sudo qubes-dom0-update

Or update dom0 via Qubes Manager.

Changes included in this update

[qubesos-bot]

Automated announcement from builder-github

The package qubes-mgmt-salt_4.1.14-1 has been pushed to the r4.1 testing repository for the Debian template.
To test this update, first enable the testing repository in /etc/apt/sources.list.d/qubes-*.list by uncommenting the line containing buster-testing (or appropriate equivalent for your template version), then use the standard update command:

sudo apt-get update && sudo apt-get dist-upgrade

Changes included in this update

[qubesos-bot]

Automated announcement from builder-github

The package qubes-mgmt-salt_4.1.16-1+deb10u1 has been pushed to the r4.1 stable repository for the Debian template.
To install this update, please use the standard update command:

sudo apt-get update && sudo apt-get dist-upgrade

Changes included in this update