/etc/network/interfaces is world readable; problem for shared keys.

Bug #37790 reported by Trey Ethridge
8
Affects Status Importance Assigned to Milestone
ifupdown (Ubuntu)
New
Medium
Unassigned

Bug Description

I just installed the new dapper flight 6 disk. The WEP key is stored in /etc/network/interfaces for my wireless card that I configured during installation.

This file can be read by anyone using the system. I feel that this is a security problem because, a computer may be authorized to connect to a wireless network, but everyone that is allowed to use that computer should not have access to the WEP key for the wireless network.

Either make the file readable by root only or move the WEP/WPA keys to a file that is readable by only root.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.