[Pkg-utopia-maintainers] Bug#645815: Bug#645815: network-manager-gnome: Should not create system-wide connections by default

[Julien Valroff]

Le mardi 18 oct. 2011 à 22:38:33 (+0200 CEST), Michael Biebl a écrit :
> reassign 645815 network-manager
> forcemerge 642136 645815
> thanks
> 
> Am 18.10.2011 21:55, schrieb Julien Valroff:
> > Package: network-manager-gnome
> > Version: 0.9.0-3
> > Severity: important
> > 
> > Dear Maintainer,
> > 
> > nm-connection-editor creates system-wide connections by default. This forces
> > the active user to authenticate as an administrative user or as root.
> > 
> > The previous behaviour (I'd say before 0.9 but not 100% sure) was imho
> > correct: standard users could create private connections without needing
> > extra rights. The current default behaviour prevents standard users from
> > creating any connection, even private.
> 
> Not quite true, as you can still create connections in nm-connection-editor
> which are not system-wide.

True, but then, the user has to know what an SSID is, what kind of
encryption scheme is used etc. Which I think is against NM philosophy.

> But the new behaviour is definitely annoying.
> That said, it is something upstream did purposefully and is most certainly not
> going to change.

Too bad, espacially as this can lead to unsecure situations: I had to send
*my* password to my girlfriend by SMS yesterday, as she *had* to connect to
a new wireless network and could not do it herself.

Policykit default configuration doesn't help. My user is in the sudo group,
but I still use the root account. Then, the only "administrative user" is
me. I had to add my girlfriend account to the sudo group to avoid similar
situations in the future, but I do not think it is optimum (I know I could
add a .pkla file to allow specific user/group to deal with NM system wide
settings, but I don't consider it a nice workaround neither).

The default NM behaviour should definitively be configurable, I totally
agree with Vincent on this point.

> Please follow up on the existing bug report #642136

All my apologies, I have missed this bug report when looking for similar
issues.

Cheers,
Julien

-- 
  .''`.   Julien Valroff ~ <julien at kirya.net> ~ <julien at debian.org>    
 : :'  :  Debian Developer & Free software contributor
 `. `'`   http://www.kirya.net/
   `-     4096R/ E1D8 5796 8214 4687 E416  948C 859F EF67 258E 26B1
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-utopia-maintainers/attachments/20111019/83558516/attachment-0001.pgp>