5f47182 fix has regressed in 1.2-beta1

2016-01-29 Thread Tore Anderson
dcbw asked me to send this to the list: When clatd starts up, it creates a new interface (not managed by NM) and adds a static route bound to it. NM immediately removes that route, breaking clatd. Of course, NM has no business deleting routes from interfaces it's not controlling. The bug (at least

Re: How to deal with unsupported wpa_supplicant parameters?

2016-01-29 Thread Eloy Paris
Hi Dan, On Thu, Jan 28, 2016 at 12:21:24PM -0600, Dan Williams wrote: > On Thu, 2016-01-28 at 17:58 +0100, Toby wrote: > > I fully understand that this specific TLS1.2 issue is temporary and > > doesn't > > need to be addressed specifically. But there are many more > > wpa_supplicant > > paramete

Re: networkmanager starts infinite number of VPN daemons

2016-01-29 Thread Adrian Freihofer
Hi Thomas Thank you for taking care about this issue. With my current setup I'm able to reproduce this. Unfortunately I cannot use NetworkManager 1.2. I'm working on a cross compiled Embedded System (based on Yocto). I guess NM 1.2 has been ported to GObject, which cannot be cross compiled by desi

NetworkManager temporary file races (CVE-2016-0764)

2016-01-29 Thread Lubomir Rintel
Hi, today we've discovered and fixed a temporary file race flaw that could enable an unprivileged authenticated local user to read out connection secrets (e.g. a VPN or Wi-Fi password) while the connection is being saved. It's fairly unlikely for this to happen as there's no way to force another

Re: [PATCH v3] settings: Resolve path if hostname is a sym-link

2016-01-29 Thread Thomas Haller
On Tue, 2016-01-26 at 22:48 +, Joel Holdsworth wrote: > If the hostname file is a symbolic link, follow it to find where the > real file is located, otherwise g_file_set_contents will attempt to > replace the link with a plain file. > --- Hi Joel, patch v3 merged to master as http://cgit.fre

Re: networkmanager starts infinite number of VPN daemons

2016-01-29 Thread Thomas Haller
On Fri, 2016-01-22 at 14:48 +0100, Adrian Freihofer wrote: > Hi, > > Setup an OpenVPN connection with NetworkManager 1.0.10 is not > always painless... I ended up with a setup where an > infinite number of openvpn daemons tried to connect to one single > server. > The problem seems to be that Netw

Re: [PATCH] wwan: retry connect on some errors and save them for log messages

2016-01-29 Thread Thomas Haller
On Tue, 2016-01-26 at 12:47 -0600, Dan Williams wrote: > First, cb751012a2f4b8ef236eab2a7c65687c99205806 mistakenly converted > the > act_stage_context_step() in connect_ready() to > connect_context_clear() > instead of connect_context_step().  This would cause the IP Type > retry > logic to fail a

Re: [PATCH v3] settings: Resolve path if hostname is a sym-link

2016-01-29 Thread Thomas Haller
On Tue, 2016-01-26 at 22:48 +, Joel Holdsworth wrote: > If the hostname file is a symbolic link, follow it to find where the > real file is located, otherwise g_file_set_contents will attempt to > replace the link with a plain file. > --- Ok, then it sounds like we should do this... Patch lgt

Re: [PATCH v2] settings: Resolve path if hostname is a sym-link

2016-01-29 Thread Thomas Haller
On Wed, 2016-01-27 at 16:16 +, Joel Holdsworth wrote: > - keyfile - not needed; at the moment we don't support any medium > that  > needs a keyfile > - /etc/NetworkManager/system-connections/ - sym-linked to  > /var/lib/NetworkManager/system-connections/ btw, "keyfile" plugin is always used

Re: [PATCH] simplify blob handling

2016-01-29 Thread Thomas Haller
On Tue, 2016-01-26 at 22:57 +0100, Matthias Berndt wrote: > Hi, > > here's the patch to simplify blob handling. > > Cheers, > Matthias > Hey Matthias, after merging your patch, I reworked the import code more. https://git.gnome.org/browse/network-manager-openvpn/log/?h=th/ovpn-import-bgo76128