[Pkg-utopia-maintainers] Bug#560067: Bug#560067: network-manager-gnome: nm connects to WPA2 with certificate after .pem file was delated

[Witold Baryluk]

On 12-09 20:14, Michael Biebl wrote:
> 
> I agree it is a security issue, but imho not such a severe one that severity
> grave is justified, especially as it only happens under very particular
> circumstances (thus downgrading to important).

Ok, it is anyway quite rare. And need to be trigered by deleting certificate file,
so it is quite unprobable to be a malicious vector attack.


> 
> This bug is supposedly fixed in the upcoming 0.8 release. If you want to try, I
> have preliminary packages at [1] and I would be interested if this packages
> behave better.

I would be happy to check this.

> [1] http://debs.michaelbiebl.de/network-manager/

I added this repositoy to sources.list.

On upgrade (or  apt-get  install network-manager-gnome network-manager),
apt-get (and aptitude) want to remove policykit. for no apparent reason.
I checked briefly and I have *pol*kit* in versions 0.9-4 or 0.95-1 or greater,
and your network-manager packages depends on libpolkit* (>= 0.7)
and recommends policykit. I don't know why aptitude wants to remove
it.

Even forcing instalation of policykit doesn't resolve problem:

sredniczarny:/home/baryluk# LC_ALL=C aptitude -d -V install network-manager-gnome network-manager policykit 
Reading package lists... Done
Building dependency tree       
Reading state information... Done
Reading extended state information... Done
Initializing package states... Done       
Reading task descriptions... Done  
The following NEW packages will be installed:
  libnm-glib-vpn1{a} [0.7.997-1]  libnm-glib2{a} [0.7.997-1]  
The following packages will be REMOVED:
  libpolkit-dbus2{u} [0.9-4]  libpolkit-gnome0{u} [0.9.2-2]  libpolkit-grant2{u} [0.9-4]  libpolkit2{u} [0.9-4]  policykit{u} [0.9-4]  policykit-gnome{u} [0.9.2-2]  
The following packages will be upgraded:
  libnm-util1 [0.7.2-2 -> 0.7.997-1]  network-manager [0.7.2-2 -> 0.7.997-1]  network-manager-gnome [0.7.2-1 -> 0.7.997-1]  
3 packages upgraded, 2 newly installed, 6 to remove and 118 not upgraded.
Need to get 0B/2598kB of archives. After unpacking 274kB will be freed.
Do you want to continue? [Y/n/?] 
...

It still wants to remove policykit. It is nonsensical.

Mayby it is something broken in unstable, i will wait few days.

Regards.

-- 
Witold Baryluk
JID: witold.baryluk // jabster.pl
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-utopia-maintainers/attachments/20091209/d5e34af9/attachment.pgp>