Source: user-setup Version: 1.109 Severity: important Tags: security X-Debbugs-Cc: [email protected], Debian Security Team <[email protected]>, Sjoerd Simons <[email protected]>
Hi In light of issues like #1148985 I would raise the question if we still should add the first created user automatically to the netdev group. Initially this was done for #352713. Somewhen back in 2012 network-manager added as well a PolicyKit pkla file which allows members of group netdev or sudo to create system-wide network connections. AFAIU though the use is still present in /usr/share/polkit-1/rules.d/org.freedesktop.NetworkManager.rules nowdays to allow members in netdev group to modify settings. The use of the netdev group in wpa remains as well. So this will not be a easy topic in general and we might need to explore how other distributions are handling the situation. Thoughs? Regards, Salvatore
