On 14/01/2019 12:27, m...@netbsd.org wrote: > [...] > This does give the ability to configure wifi with a GUI w/o root or > something akin to polkit, via some pkgsrc packages (There's wpa_gui, for > example, it's a QT5 thing. I imagine writing other things is not much > harder)
Yes, that's also what x11/deforaos-panel uses to configure wireless. > I just figured this change might be controversial so we need to be > honest about it happening. The change Roy made is something I also perform systematically on any system I install and expect to connect to a wireless networks. It is harmless when wpa_supplicant(8) is not running. I agree that a dedicated group to allow network configuration would be nice. However users in the "wheel" group are usually expected to be allowed to su(1) anyway, and I think the balance is already very good with this group to perform the corresponding privileged operations without prompting for a password nor exposing too much. Cheers, -- khorben
