netplan stores wifi-password world-readable

[Rolf Leggewie]

-rw-r--r-- 1 root root 293 Apr 11 2018 /etc/netplan/01-netcfg.yaml

above file stores the wifi password in plain text!

[Łukasz Zemczak (sil2100)]

The /etc/netplan/01-netcfg.yaml file is generated by netcfg and is unrelated to netplan.io itself (as netplan only comes into play when parsing the file). This means that we essentially need to modify netcfg, and possibly all other installers that generate netplan configs (subiquity?), to not write the passphrase into a world-readable file. As per Steve's input, I guess the best way would be do split the config into two parts - one 'world-readable' with info that everyone should have access to and one with secrets.

[Michael Hudson-Doyle (mwhudson)]

I am aware that as and when the live-server installer supports wifi at all I need to do something about this. I'm not sure what, but something :)

[Oliver Grawert (ogra)]

(since this bug has come up in UbuntCore discussions and apparently scared some people)

note that netplan configs on Ubuntu Core as created by subiquity are root-only readable, so UbuntuCore is not affected:

$ ls -l /etc/netplan/00-snapd-config.yaml
-rw------- 1 root root 138 Jul 25 13:19 /etc/netplan/00-snapd-config.yaml

[Brian Murray (brian-murray)]

The Eoan Ermine has reached end of life, so this bug will not be fixed for that release

[Rolf Leggewie (r0lf)]

a security issue with medium importance not fixed for almost 2 years?