[Pkg-utopia-maintainers] Bug#642136: Bug#642136: Bug#642136: network-manager: Connecting to a wifi network requires org.freedesktop.NM.settings.modify.system privileges

[Vincent Bernat]

On Tue, 20 Sep 2011 09:38:00 +0200, Michael Biebl wrote:
> Am 20.09.2011 07:42, schrieb Vincent Bernat:

>>>> Since NetworkManager 0.9, a simple user is not allowed to connect 
>>>> to
>>>> some wireless network unless it is granted (through policy kit or
>>>> appropriate permissions)
>>>> org.freedesktop.NetworkManager.settings.modify.system. This 
>>>> permission
>>>> allows to alter existing connections as well. An active user 
>>>> should be
>>>> authorized to use any wireless network if he wants to by default 
>>>> (like
>>>> in previous versions). Or it should be possible to configure 
>>>> network
>>>> manager to allow users to connect to wireless networks without
>>>> enabling them to modify other system settings.
>>
>>> This is of course possible.
>>> Was the connection you tried to enable created by another user? 
>>> What's the name
>>> of the user trying to activate the connection?
>>> Which GUI frontend (and which version) do you use?
>>> Was  the connection  imported from  earlier versions  i.e.  created 
>>> by
>>> nm-applet < 0.9?
>>
>> The   connection    did   not   exist    (it   does   not    appear  
>> in
>> nm-connection-editor). I  am using  nm-applet 0.9.0-2. I  have 
>> restarted
>> both nm-applet and Network Manager to ensure they are in sync.
>>
>>> As connections are now all stored in 
>>> /etc/NetworkManager/system-connections/ ,
>>> could you attach the corresponding keyfile (make sure it doesn't 
>>> contain any
>>> confidential data)
>>
>> As the connection does not exist, there is no keyfile for it.
>
> Now you have me confused. How can you activate a connection which
> does not exist?

This is a wireless network I never connected to. I choose it from the 
available wireless network detected by Network Manager. Through polkit 
helper, Network Manager is asking me for administrative rights just to 
connect to this new wireless network.

I can connect to an unknown wire network without password but I need to 
grant administrative rights to connect an unknown wireless network. I 
would like to not be prompted for something like this but the right 
requested is overly general. If I grant it to the active users, he will 
be able to tamper with existing connections. In previous version, 
connecting to an unknown wireless network was granted without passwords 
to the active user.