Is this bug still present in 12.04/Precise? I just discovered that in
/etc/NetworkManager/system-connections there is a file which holds the
password for a WPA-EAP/TTLS connection in plaintext even though that
connection is not marked as "available for all users" in the wifi
settings. This has huge security implications as per comment #41 and
most users would expect it to be stored at least inside $HOME, possible
protected by ecryptfs.

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to network-manager in Ubuntu.
https://bugs.launchpad.net/bugs/41134

Title:
  Does not store WPA-Enterprise password in keyring

Status in NetworkManager:
  Fix Released
Status in “network-manager” package in Ubuntu:
  Fix Released
Status in “network-manager” package in Baltix:
  Invalid

Bug description:
  It appears to store the password in plaintext in gconf at this time,
  unlike WPA-PSK or WEP.

To manage notifications about this bug go to:
https://bugs.launchpad.net/network-manager/+bug/41134/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to