[Pkg-utopia-maintainers] Bug#809572: Bug#809572: policykit-1: nm-connection-editor cannot edit or delete connections

[Nils Dagsson Moskopp]

Michael Biebl <biebl at debian.org> writes:

> Control: tags -1 - patch
>
> Am 01.01.2016 um 17:21 schrieb Nils Dagsson Moskopp:
>> Package: policykit-1
>> Version: 0.105-14
>> Severity: important
>> Tags: patch
>> 
>> Dear Maintainer,
>> 
>> today I tried to run nm-connection-editor to view a password.
>> The password was for a wireless network, I input it yesterday.
>> 
>> I could not edit the connection in the nm-connection-editor:
>> The button to edit is was greyed out. I am using i3wm as WM.
>> 
>> I found that debian bug #804044 contains a working solution:
>> <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804044#5>
>> 
>> I edited the following file (see attachment to the bug report):
>> /var/lib/polkit-1/localauthority/10-vendor.d/org.freedesktop.NetworkManager.pkla
>> After I saved the file, the bug went away. I have no idea why!
>> 
>> I tried to find out which package the file does belong to.
>> I was unable to do so using the “apt-file search” command.
>> Therefore I am filing this bug against policykit-1 now.
>
> This is not a valid patch (as it opens a security hole), thus removing
> the patch tag.

I understand. What exactly is the security hole and how broad is its
scope? Can someone outside my computer now see the network password?

Also, do you have any idea which package owns the file in question?

> It is also not necessary if you have an active logind session.

“pgrep -a logind” outputs:

--- ✂ ---
2118 /lib/systemd/systemd-logind
--- ✂ ---

Does that suffice?

> Do you have an active logind session for your logged in user (check with
> loginctl) and is a polkit agent running in your session?

“loginctl” run as user “erlehmann” outputs:

--- ✂ ---
   SESSION        UID USER             SEAT            
        c1        107 lightdm          seat0           
         1       1000 erlehmann        seat0           

2 sessions listed.
--- ✂ ---

I have no idea what “a polkit agent” means. “pgrep -a polkit” outputs:

--- ✂ ---
2350 /usr/lib/policykit-1/polkitd --no-debug
--- ✂ ---

>
> -- 
> Why is it that all of the instruments seeking intelligent life in the
> universe are pointed away from Earth?
>

-- 
Nils Dagsson Moskopp // erlehmann
<http://dieweltistgarnichtso.net>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 194 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-utopia-maintainers/attachments/20160101/b6d89049/attachment.sig>