Bug#778924: ITP: linssid -- graphical wireless scanner
Hi, Eriberto Mota eribe...@debian.org writes: I did a patch to force the program runs as root only and ignore the internal sudo commands. In manpage (created by me) , I explained how to use gksudo to run the program. The icon on desktop menu uses gksudo too. You can see the current packaging here[1]. Thanks for working on this. Running the UI as root is not very nice either but definitely better than leaking user's password. Are root privileges really needed? The commands that linssid runs seem to be iw dev and cat /proc/net/wireless. Both of these seem to return the same output as normal user here: oregano:~$ sudo iw dev phy#0 Interface wlan0 ifindex 3 type managed oregano:~$ sudo cat /proc/net/wireless Inter-| sta-| Quality| Discarded packets | Missed | WE face | tus | link level noise | nwid crypt frag retry misc | beacon | 22 wlan0: 49. -61. -2560 0 0 0 30 0 oregano:~$ /sbin/iw dev phy#0 Interface wlan0 ifindex 3 type managed oregano:~$ cat /proc/net/wireless Inter-| sta-| Quality| Discarded packets | Missed | WE face | tus | link level noise | nwid crypt frag retry misc | beacon | 22 wlan0: 55. -55. -2560 0 0 0 30 0 Is there some other functionality that actually needs root privileges? -Timo -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#778924: ITP: linssid -- graphical wireless scanner
Really. But a good idea for a full-time service, not for a casual program. :-/ The life is hard... :-P Eriberto 2015-02-23 15:45 GMT-03:00 Timo Juhani Lindfors timo.lindf...@iki.fi: Hi, hmm, nm-tool does not need root privileges, it relies on a background daemon. -Timo -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#778924: ITP: linssid -- graphical wireless scanner
Hi, Eriberto eribe...@eriberto.pro.br writes: Really. But a good idea for a full-time service, not for a casual program. :-/ But maybe linssid could optionally support this interface? Just optionally call nm-tool instead of sudo iwconfig if it is available? You don't need to add support for the dbus interface if that is too complicated. -Timo -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#778924: ITP: linssid -- graphical wireless scanner
Hi Timo, Needs root. We have iwlist too (in linssid-app/Getter.cpp). Yesterday, my first try was remove all sudo and use the whole path in commands (as /sbin/iw). The result was only my machine being showed (because of iwlist, I think). My second try was change sudo by gksudo in code. Worked but iwlist was called each 5 seconds and the user must to provide the password. If using NOPASSWD in /etc/sudoers, a tab will blink in task bar (I use KDE) each 5 sec (yes, a tab created by gksudo). The solution: full root, as other similar programs. Cheers, Eriberto 2015-02-23 15:01 GMT-03:00 Timo Juhani Lindfors timo.lindf...@iki.fi: Hi, Eriberto Mota eribe...@debian.org writes: I did a patch to force the program runs as root only and ignore the internal sudo commands. In manpage (created by me) , I explained how to use gksudo to run the program. The icon on desktop menu uses gksudo too. You can see the current packaging here[1]. Thanks for working on this. Running the UI as root is not very nice either but definitely better than leaking user's password. Are root privileges really needed? The commands that linssid runs seem to be iw dev and cat /proc/net/wireless. Both of these seem to return the same output as normal user here: oregano:~$ sudo iw dev phy#0 Interface wlan0 ifindex 3 type managed oregano:~$ sudo cat /proc/net/wireless Inter-| sta-| Quality| Discarded packets | Missed | WE face | tus | link level noise | nwid crypt frag retry misc | beacon | 22 wlan0: 49. -61. -2560 0 0 0 30 0 oregano:~$ /sbin/iw dev phy#0 Interface wlan0 ifindex 3 type managed oregano:~$ cat /proc/net/wireless Inter-| sta-| Quality| Discarded packets | Missed | WE face | tus | link level noise | nwid crypt frag retry misc | beacon | 22 wlan0: 55. -55. -2560 0 0 0 30 0 Is there some other functionality that actually needs root privileges? -Timo -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#778924: ITP: linssid -- graphical wireless scanner
Hi, hmm, nm-tool does not need root privileges, it relies on a background daemon. -Timo -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#778924: ITP: linssid -- graphical wireless scanner
Hi, I will suggest it. However, we depend the upstream decision and development. Now, I will keep the root-only to allow the use in Debian securely. Eriberto 2015-02-23 16:26 GMT-03:00 Timo Juhani Lindfors timo.lindf...@iki.fi: Hi, Eriberto eribe...@eriberto.pro.br writes: Really. But a good idea for a full-time service, not for a casual program. :-/ But maybe linssid could optionally support this interface? Just optionally call nm-tool instead of sudo iwconfig if it is available? You don't need to add support for the dbus interface if that is too complicated. -Timo -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#778924: ITP: linssid -- graphical wireless scanner
Hi,
Joao Eriberto Mota Filho eribe...@debian.org writes:
Package: wnpp
Severity: wishlist
Owner: Joao Eriberto Mota Filho eribe...@debian.org
* Package name: linssid
Version : 2.7
Upstream Author : Warren Severin wseve...@warsev.com
* URL : https://sf.net/projects/linssid
I took a brief look at the source code and noticed that it leaks user's
password in the process list:
void MainForm::addInterfaces() {
...
commandLine = echo \' + password + \' | sudo -kS -p \\ + commandLine;
...
if (system(commandLine.c_str()) == 0) {
-Timo
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#778924: ITP: linssid -- graphical wireless scanner
Hi Timo,
Thanks a lot for your message and tip.
I did a patch to force the program runs as root only and ignore the
internal sudo commands. In manpage (created by me) , I explained how
to use gksudo to run the program. The icon on desktop menu uses gksudo
too. You can see the current packaging here[1].
[1] http://anonscm.debian.org/cgit/collab-maint/linssid.git
I will discuss with the upstream about the problem. Do you have any
idea to improve the program?
The package is NEW and I uploaded to 2-day delay queue to wait
possible new issues from you.
Have a good night!
Cheers,
Eriberto
2015-02-22 11:57 GMT-03:00 Timo Juhani Lindfors timo.lindf...@iki.fi:
Hi,
Joao Eriberto Mota Filho eribe...@debian.org writes:
Package: wnpp
Severity: wishlist
Owner: Joao Eriberto Mota Filho eribe...@debian.org
* Package name: linssid
Version : 2.7
Upstream Author : Warren Severin wseve...@warsev.com
* URL : https://sf.net/projects/linssid
I took a brief look at the source code and noticed that it leaks user's
password in the process list:
void MainForm::addInterfaces() {
...
commandLine = echo \' + password + \' | sudo -kS -p \\ + commandLine;
...
if (system(commandLine.c_str()) == 0) {
-Timo
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#778924: ITP: linssid -- graphical wireless scanner
Package: wnpp Severity: wishlist Owner: Joao Eriberto Mota Filho eribe...@debian.org * Package name: linssid Version : 2.7 Upstream Author : Warren Severin wseve...@warsev.com * URL : https://sf.net/projects/linssid * License : GPL-3 Programming Lang: C++ Description : graphical wireless scanner LinSSID displays locally receivable 802.11 wireless attach points and ad hoc networks. . A table is displayed with various parameters such as MAC address, channel, and signal strength. Graphs are also displayed with signal strength by channel and signal strength over time. . LinSSID is graphically and functionally similar to inSSIDer (for Microsoft Windows) and Wifi Analyzer (for Android). . LinSSID can be used to measure the local perfomance or to search for an interference free channel to be set in a wireless router (access point). The wireless established link won't be affected by these operations because LinSSID needn't set the monitor mode in network interface. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
