| 2009-02-06 12:11:16 |
Onesimus |
bug |
|
|
added bug |
| 2009-02-06 12:36:20 |
Marc Deslauriers |
None: status |
New |
Incomplete |
|
| 2009-02-06 12:36:20 |
Marc Deslauriers |
None: statusexplanation |
|
|
|
| 2009-02-06 12:37:46 |
Marc Deslauriers |
None: assignee |
|
mdeslaur |
|
| 2009-02-06 12:37:46 |
Marc Deslauriers |
None: bugtargetdisplayname |
Ubuntu |
policykit (Ubuntu) |
|
| 2009-02-06 12:37:46 |
Marc Deslauriers |
None: bugtargetname |
ubuntu |
policykit (Ubuntu) |
|
| 2009-02-06 12:37:46 |
Marc Deslauriers |
None: title |
Bug #326135 in Ubuntu: "User Privileges ignored " |
Bug #326135 in policykit (Ubuntu): "User Privileges ignored " |
|
| 2009-02-06 13:30:48 |
Onesimus |
bug |
|
|
added attachment 'Users Settings.png' (Users Settings.png) |
| 2009-02-06 13:31:39 |
Onesimus |
bug |
|
|
added attachment 'Account 'josh' Properties.png' (Account 'josh' Properties.png) |
| 2009-02-06 13:49:36 |
Onesimus |
bug |
|
|
added attachment 'wireless connection.png' (wireless connection.png) |
| 2009-02-09 19:50:09 |
Marc Deslauriers |
who_made_private |
joe-heaton |
|
|
| 2009-02-09 19:50:48 |
Marc Deslauriers |
policykit: status |
Incomplete |
Confirmed |
|
| 2009-02-09 19:50:48 |
Marc Deslauriers |
policykit: assignee |
mdeslaur |
|
|
| 2009-04-10 14:52:55 |
Marc Deslauriers |
affects |
policykit (Ubuntu) |
gnome-system-tools (Ubuntu) |
|
| 2009-04-16 23:40:23 |
Kees Cook |
gnome-system-tools (Ubuntu): importance |
Undecided |
Low |
|
| 2010-01-11 20:59:04 |
Milan Bouchet-Valat |
bug task added |
|
ubuntu-meta (Ubuntu) |
|
| 2010-01-11 20:59:25 |
Milan Bouchet-Valat |
ubuntu-meta (Ubuntu): importance |
Undecided |
Low |
|
| 2010-01-13 16:07:33 |
ceg |
bug task added |
|
policykit-1 (Ubuntu) |
|
| 2010-01-13 16:09:26 |
ceg |
bug task added |
|
network-manager (Ubuntu) |
|
| 2010-01-15 21:06:07 |
Jamie Strandboge |
ubuntu-meta (Ubuntu): status |
New |
Invalid |
|
| 2010-01-25 13:33:20 |
Marc Deslauriers |
network-manager (Ubuntu): status |
New |
Confirmed |
|
| 2010-01-25 13:33:23 |
Marc Deslauriers |
policykit-1 (Ubuntu): status |
New |
Confirmed |
|
| 2010-02-05 23:38:02 |
Marc Deslauriers |
network-manager (Ubuntu): importance |
Undecided |
Low |
|
| 2010-02-05 23:38:04 |
Marc Deslauriers |
policykit-1 (Ubuntu): importance |
Undecided |
Low |
|
| 2010-02-12 19:27:26 |
James Westby |
policykit-1 (Ubuntu): status |
Confirmed |
Invalid |
|
| 2010-03-12 13:48:22 |
ceg |
summary |
User Privileges ignored |
user:group privileges ignored |
|
| 2010-03-12 13:50:27 |
ceg |
summary |
user:group privileges ignored |
policykit breaking unix user/group privileges |
|
| 2010-03-12 13:58:56 |
ceg |
description |
I have set up a number of user accounts. On one of these accounts I adjusted the user privileges (System->Administration->Users and Groups->Properties->User Privileges). For one particular user I de-selected the two options:
* Connect to Internet using a modem
* Connect to wireless and ethernet networks
However, despite disabling access to the internet, the user is still able to connect to the internet through a wireless connection.
I am assuming that this is a security vulnerability, because the intention is to deny access and this doesn't occur.
I am using Ubuntu 8.10 |
I have set up a number of user accounts. On one of these accounts I adjusted the user privileges (System->Administration->Users and Groups->Properties->User Privileges). For one particular user I de-selected the two options:
* Connect to Internet using a modem
* Connect to wireless and ethernet networks
However, despite disabling access to the internet, the user is still able to connect to the internet through a wireless connection.
I am assuming that this is a security vulnerability, because the intention is to deny access and this doesn't occur.
I am using Ubuntu 8.10
----
Policykit has been introduced without supporting the unix groups. (used by admins and set up by the installer)
i.e. It is possible to create a policy that just said "yes" rather than "auth_*" where the default was "no", for anyone in the netdev group
so theiy could do it without a password.
-> we should ship PolicyKit config files that make use of these groups.
|
|
| 2010-03-12 13:59:43 |
ceg |
tags |
|
regression |
|
| 2010-03-12 14:00:20 |
ceg |
summary |
policykit breaking unix user/group privileges |
policykit introduction broke unix user/group privileges |
|
| 2010-03-12 14:00:40 |
ceg |
policykit-1 (Ubuntu): status |
Invalid |
Confirmed |
|
| 2010-03-18 09:45:38 |
ceg |
bug task added |
|
policykit (Ubuntu) |
|
| 2010-03-18 09:58:18 |
ceg |
summary |
policykit introduction broke unix user/group privileges |
policykit introduction broke unix user groups |
|
| 2010-03-18 10:57:55 |
Milan Bouchet-Valat |
policykit (Ubuntu): status |
New |
Invalid |
|
| 2010-05-06 12:28:07 |
ceg |
nominated for series |
|
Ubuntu Maverick |
|
| 2015-03-26 17:01:14 |
Marc Deslauriers |
gnome-system-tools (Ubuntu): status |
Confirmed |
Won't Fix |
|
| 2015-03-26 17:01:16 |
Marc Deslauriers |
network-manager (Ubuntu): status |
Confirmed |
Won't Fix |
|
| 2015-03-26 17:01:21 |
Marc Deslauriers |
policykit-1 (Ubuntu): status |
Confirmed |
Won't Fix |
|
