[Pkg-sysvinit-devel] Bug#540608: Bug#540608: initscripts: wireless key stored in logs

Petter Reinholdtsen pere at hungry.com
Sun Aug 9 06:16:53 UTC 2009


reassign netbase
thanks

[Michael S. Gilbert]
> hello, mandriva issued the following advisory [0],[1],[2] for
> initscripts. supposedly part of the user's wireless key is logged.  i
> don't use WPA, so i can't verify this on debian, but it is worth checking.
> 
> [0] http://www.mandriva.com/en/security/advisories?name=MDVSA-2009:170
> [1] https://qa.mandriva.com/52149
> [2] https://qa.mandriva.com/51606

Not much to go on there, as the first URL is unavailable, the second
have little information and the third is blocked for the public.

Anyway, linked in from [2] I found
<URL:http://forum.mandriva.com/viewtopic.php?p=694184>, which contain
this terminal output.

  [root at PC_Master philippe]# service network restart 
  Shutting down interface eth0:                                   [  OK  ] 
  Shutting down interface wlan0:                                  [  OK  ] 
  Shutting down loopback interface:                               [  OK  ] 
  Bringing up loopback interface:                                 [  OK  ] 
  Configuring wireless regulatory domain  nl80211 not found.              
                                                                  [ÉCHEC ] 
  Bringing up interface eth0:                                     [  OK  ] 
  Bringing up interface wlan0:  nl80211 not found.                        
  iwconfig: unknown command "DESCend,"                                    
                                                                  [  OK  ]

This make me believe the equivalent subsystem in Debian is
/etc/init.d/networking, which currently is part of the net-base
package.  Reassigning there.

Happy hacking,
-- 
Petter Reinholdtsen





More information about the Pkg-sysvinit-devel mailing list