I am marking this bug as confirmed because it has been confirmed in many
duplicates.
** Changed in: netcfg (Ubuntu)
Status: New = Confirmed
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is a bug assignee.
against netcfg. Needs testing.
** Package changed: wireless-tools (Ubuntu) = netcfg (Ubuntu)
** Changed in: netcfg (Ubuntu)
Status: Invalid = New
** Patch added: proposed patch
https://bugs.launchpad.net/ubuntu/+source/netcfg/+bug/14392/+attachment/3896114/+files/file-mode.patch
--
The attachment proposed patch seems to be a patch. If it isn't,
please remove the patch flag from the attachment, remove the patch
tag, and if you are a member of the ~ubuntu-reviewers, unsubscribe the
team.
[This is an automated message performed by a Launchpad user owned by
~brian-murray, for
I found that after doing a fresh install of 13.10 server, the wpa
passphrase for the network used during install was stored in plain text
in /etc/network/interfaces and by default the file has 644 permissions.
As stated by the original creator, this is a potential security risk.
--
You received
Heck if I know... I reported this bug like seven years ago, and haven't used
Debian for a long time.
On Tue, Sep 14, 2010 at 9:42 PM, rusivi1 14...@bugs.launchpad.net
wrote:
Thank you for reporting this bug.
Is this still an issue in gnome-system-tools (Debian)?
** Changed in:
Thank you for reporting this bug.
Is this still an issue in gnome-system-tools (Debian)?
** Changed in: gnome-system-tools (Debian)
Status: New = Incomplete
--
[network-admin] WEP key stored in world-readable /etc/network/interfaces
https://bugs.launchpad.net/bugs/14392
You received
** Changed in: wireless-tools (Ubuntu)
Status: New = Confirmed
** Changed in: wireless-tools (Ubuntu)
Status: Confirmed = Invalid
--
[network-admin] WEP key stored in world-readable /etc/network/interfaces
https://bugs.launchpad.net/bugs/14392
You received this bug notification
Sebastien Bacher [2006-10-10 22:57 -]:
potential patch for the issue. The patch change the mod and group when a
config is modified, we can make it changing it only when a key is
written by using the key option
The latter would be preferable IMHO. There's nothing to hide on an
usual
Fixed with this upload:
system-tools-backends (1.9.7-0ubuntu3) edgy; urgency=low
.
* debian/patches/01_chmod_network_interfaces_when_using_key.patch:
- change network interfaces file mode to 640 and the group to admin
when a key is set (Ubuntu: #14392)
The patch used:
diff
Doesn't this introduce a race condition where the key has been updated
first and then the file protected? If I understand the code paths
correctly, moving the key line up one spot in the table's list should
solve this race.
--
[network-admin] WEP key stored in world-readable
Thank you for the comment Kees, fixed with that upload:
system-tools-backends (1.9.7-0ubuntu4) edgy; urgency=low
.
* debian/patches/01_chmod_network_interfaces_when_using_key.patch:
- change permission before writting the key,
thank to Kees Cook for pointing that
--
potential patch for the issue. The patch change the mod and group when a
config is modified, we can make it changing it only when a key is
written by using the key option
do we want to change that now for edgy or after edgy?
** Attachment added: potential patch
The problem here is that a user can connect other machines to the
network if they have the WEP key.
** Bug 63394 has been marked a duplicate of this bug
--
[network-admin] WEP key stored in world-readable /etc/network/interfaces
https://launchpad.net/bugs/14392
--
desktop-bugs mailing list
** Also affects: wireless-tools (Ubuntu)
Importance: Undecided
Status: Unconfirmed
--
[network-admin] WEP key stored in world-readable /etc/network/interfaces
https://launchpad.net/bugs/14392
--
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
please stay correct there is just lot of bugs and fixing them might take
some time. If you want to help and make the fix faster feel free to send
a patch
** Bug 60131 has been marked a duplicate of this bug
** Changed in: gnome-system-tools (Ubuntu)
Importance: Medium = High
Assignee:
15 matches
Mail list logo
