Comment 8 for bug 1060907

Revision history for this message
Mathieu Trudel-Lapierre (cyphermox) wrote : Re: [Bug 1060907] Re: NetworkManager stores wifi passwords in plain text

If connections are created with "Available to all users" unchecked, the
password will be saved in the user's keyring.

The policy access you need for this is ...modify.own, not system; and will
give sufficient access for the users to create wifi connections for their
own use, while not allowing modifications to provisioned settings. Giving
modify.system access is equivalent to giving administrator access for
changing/reading the connections created system-wide (the default), and
seeing the passwords from the UI.
Le 3 oct. 2012 09:45, "Ingar Smedstad" <email address hidden> a
écrit :

> As long as it is not in plain text in a file on the filesystem I do not
> care.
>
> We want users to be able to set up wireless connections and select
> available networks. As far as I have acertained this is accomplished by
> giving them rights to
> org.freedesktop.NetworkManager.settings.modify.system.
>
> If we do this passwords WILL be stored in plain text in /etc.
>
> Storing passwords in plain text will *allways* and in any circumstances
> be a bad design.
>
> The VPN test I set up did not store my password in plain text, and yet
> mysteriously managed to start again without prompting me for a password.
>
> --
> You received this bug notification because you are subscribed to
> network-manager in Ubuntu.
> https://bugs.launchpad.net/bugs/1060907
>
> Title:
> NetworkManager stores wifi passwords in plain text
>
> Status in “network-manager” package in Ubuntu:
> Invalid
>
> Bug description:
> /etc/NetworkManager/system-connections/some-wireless-profile contains
> plain text passwords.
>
> To manage notifications about this bug go to:
>
> https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/1060907/+subscriptions
>