Re: NetworkManager cleartext config files vs home folder encryption

2013-12-25 Thread Dimitri John Ledkov
On 25 December 2013 02:07, Per Guth mailingl...@perguth.de wrote: Hello, I recently stumbled over the fact, that NetworkManager by default stores Wifi profiles *including clear text passwords* under `/etc/NetworkManager/system-connections/`. It's stored there because All users may connect

Re: NetworkManager cleartext config files vs home folder encryption

2013-12-25 Thread Per Guth
On 25.12.2013 10:36, Dimitri John Ledkov wrote: It's stored there because All users may connect to this network ticked on that Wifi connection point. Open network indicator - Edit connections ... - Select network - Click edit... - in general tab untick All users may connect to this network. I

Re: NetworkManager cleartext config files vs home folder encryption

2013-12-25 Thread Dimitri John Ledkov
On 25 December 2013 10:31, Per Guth m...@perguth.de wrote: On 25.12.2013 10:36, Dimitri John Ledkov wrote: It's stored there because All users may connect to this network ticked on that Wifi connection point. Open network indicator - Edit connections ... - Select network - Click edit... - in

Re: NetworkManager cleartext config files vs home folder encryption

2013-12-25 Thread Per Guth
On 25.12.2013 15:15, Dimitri John Ledkov wrote: The expectations are clear that things_outside_ of home directory are not encrypted. One should use full disk encryption if full disk encryption is expected;-) Well, that's true for sure. But the user will never be made aware that the passwords

Re: NetworkManager cleartext config files vs home folder encryption

2013-12-25 Thread Martin Pitt
Dimitri John Ledkov [2013-12-25 14:15 +]: I don't remember, but i thought it was not the default. Until lucid or natty it indeed wasn't, it defaulted to per-user connections. But this is highly unfriendly with multiple users, you don't have network available in lightdm, and all our OEMs

Re: NetworkManager cleartext config files vs home folder encryption

2013-12-25 Thread Dimitri John Ledkov
On 25 December 2013 20:20, Martin Pitt martin.p...@ubuntu.com wrote: Dimitri John Ledkov [2013-12-25 14:15 +]: I don't remember, but i thought it was not the default. Until lucid or natty it indeed wasn't, it defaulted to per-user connections. But this is highly unfriendly with multiple