[Desktop-packages] [Bug 1060907] Re: NetworkManager stores wifi passwords in plain text

2013-12-28 Thread Ritesh Khadgaray
This requires implementation of user connection seen here - https://bugs.launchpad.net/ubuntu/+source/network- manager/+bug/1116317 . -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to network-manager in Ubuntu.

[Desktop-packages] [Bug 1060907] Re: NetworkManager stores wifi passwords in plain text

2013-10-03 Thread Ingar Smedstad
It may look as this is an implementation problem rather than a problem with Network Manager itself. Though I still believe that even allowing passwords to be stored as text is a security flaw, it is possible to configure NM so that it does not store passwords in text files. I have tried KDE and

[Desktop-packages] [Bug 1060907] Re: NetworkManager stores wifi passwords in plain text

2013-10-03 Thread Ingar Smedstad
The problems I have identified so far: 1. If you have the rights org.freedesktop.NetworkManager.settings.modify.own you will not be able to make a connection by selecting available networks. 2. The option Available to all users seems to be implied when you select a connection from available

[Desktop-packages] [Bug 1060907] Re: NetworkManager stores wifi passwords in plain text

2013-10-02 Thread Bug Watch Updater
** Changed in: network-manager Status: New = Incomplete ** Changed in: network-manager Importance: Critical = Medium -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to network-manager in Ubuntu.

[Desktop-packages] [Bug 1060907] Re: NetworkManager stores wifi passwords in plain text

2013-02-05 Thread Tim Parker
I am also having issues with this. In my use case, with NetworkManager-1.0.9.6.4-3.fc17 (64-bit), I have a VPN connection for a non-root user which is set to NOT connect automatically and NOT allowed on a system basis. If I do not enter a passphrase I cannot save the VPN configuration. If I do add

[Desktop-packages] [Bug 1060907] Re: NetworkManager stores wifi passwords in plain text

2013-01-23 Thread Stephan Springer
** Bug watch added: GNOME Bug Tracker #685395 https://bugzilla.gnome.org/show_bug.cgi?id=685395 ** Also affects: network-manager via https://bugzilla.gnome.org/show_bug.cgi?id=685395 Importance: Unknown Status: Unknown -- You received this bug notification because you are a

[Desktop-packages] [Bug 1060907] Re: NetworkManager stores wifi passwords in plain text

2013-01-23 Thread Bug Watch Updater
** Changed in: network-manager Status: Unknown = New ** Changed in: network-manager Importance: Unknown = Critical -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to network-manager in Ubuntu.

[Desktop-packages] [Bug 1060907] Re: NetworkManager stores wifi passwords in plain text

2012-10-04 Thread Ingar Smedstad
That may work - IF you create a connection from scratch. People mostly does not do this and I am not going to require my users to learn how to do this either. The normal way of connecting with wireless is to select a connection from the list. If this is a secure connection the user is required to

[Desktop-packages] [Bug 1060907] Re: NetworkManager stores wifi passwords in plain text

2012-10-03 Thread Marc Deslauriers
This is by design. The passwords are stored in files which have appropriate permissions, and the system must be able to retrieve them to transmit to wireless networks. Obfuscating the passwords in those files in a recoverable way would not improve security. ** Changed in: network-manager

[Desktop-packages] [Bug 1060907] Re: NetworkManager stores wifi passwords in plain text

2012-10-03 Thread Ingar Smedstad
Those files do not have appropriate permissions. Anyone with root access can read them. While we do have a certain amount of trust in our administrators we do not want to hand them the passwords of our users. We have wireless networks that use the users credentials and not some random password.

[Desktop-packages] [Bug 1060907] Re: NetworkManager stores wifi passwords in plain text

2012-10-03 Thread Ingar Smedstad
I also notice that VPN-connection somehow manages NOT to store the password in /etc... -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to network-manager in Ubuntu. https://bugs.launchpad.net/bugs/1060907 Title: NetworkManager stores

[Desktop-packages] [Bug 1060907] Re: NetworkManager stores wifi passwords in plain text

2012-10-03 Thread Marc Deslauriers
If you want to store wifi passwords on a per-user basis, you should create user wifi connections, not system wifi connections. When creating the connection, uncheck the Available to all users check box. Please be aware that even if wifi passwords are stored in the user's keyring, it is still

[Desktop-packages] [Bug 1060907] Re: NetworkManager stores wifi passwords in plain text

2012-10-03 Thread Marc Deslauriers
If you disagree with the Network Manager design, please file a bug upstream here: https://bugzilla.gnome.org/ Thanks. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to network-manager in Ubuntu. https://bugs.launchpad.net/bugs/1060907

[Desktop-packages] [Bug 1060907] Re: NetworkManager stores wifi passwords in plain text

2012-10-03 Thread Ingar Smedstad
As long as it is not in plain text in a file on the filesystem I do not care. We want users to be able to set up wireless connections and select available networks. As far as I have acertained this is accomplished by giving them rights to org.freedesktop.NetworkManager.settings.modify.system. If

[Desktop-packages] [Bug 1060907] Re: NetworkManager stores wifi passwords in plain text

2012-10-03 Thread Ingar Smedstad
If you disagree with the Network Manager design, please file a bug upstream here: https://bugzilla.gnome.org/ Thanks. Well thats what happens when I spend too long thinking about an answer. The other part slips one in unseen :) I will do as you ask. -- You received this bug notification

[Desktop-packages] [Bug 1060907] Re: NetworkManager stores wifi passwords in plain text

2012-10-03 Thread Marc Deslauriers
** Changed in: network-manager (Ubuntu) Status: Invalid = Opinion -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to network-manager in Ubuntu. https://bugs.launchpad.net/bugs/1060907 Title: NetworkManager stores wifi passwords in

Re: [Desktop-packages] [Bug 1060907] Re: NetworkManager stores wifi passwords in plain text

2012-10-03 Thread Mathieu Trudel-Lapierre
If connections are created with Available to all users unchecked, the password will be saved in the user's keyring. The policy access you need for this is ...modify.own, not system; and will give sufficient access for the users to create wifi connections for their own use, while not allowing