[Python-apps-team] Bug#512160: wicd: Does not limit congiguration capability to a group

[Osamu Aoki]

Package: wicd
Version: 1.5.8-1
Severity: normal

I know for network configuration, it is primarily limited to root.

Since it is not so convienient to limit this to root only, from the days
of ppp, we have been supporting acess by the user but with limitation
via group mechanism using: 
 * dialout
    Full and direct access to serial ports. (reconfigure modem, dial
    anywhere, etc.)
 * dip
    "Dialup IP", enough to run ppp or dip commands

Similar measures have been taken by a similar wireless network
configuration package network-manager by introducing:
 * netdev

At this moment, wicd does not seem to care this kind of normal security
measues and allow all user to have any configuration change for the
network if it is supported protocol.

Some packet connection costs money, so I think there should be some
group limitation .... am I wrong?

Osamu

-- System Information:
Debian Release: 5.0
  APT prefers unstable
  APT policy: (800, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.26-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages wicd depends on:
ii  dhcp3-client                3.1.1-5      DHCP client
ii  ethtool                     6+20080913-1 display or change Ethernet device 
ii  iproute                     20080725-2   networking and traffic control too
ii  net-tools                   1.60-22      The NET-3 networking toolkit
ii  python                      2.5.2-3      An interactive high-level object-o
ii  python-dbus                 0.83.0-1     simple interprocess messaging syst
ii  python-glade2               2.12.1-6     GTK+ bindings: Glade support
ii  python-gtk2                 2.12.1-6     Python bindings for the GTK+ widge
ii  python-support              0.8.7        automated rebuilding support for P
ii  wireless-tools              29-1.1       Tools for manipulating Linux Wirel
ii  wpasupplicant               0.6.4-3      Client support for WPA and WPA2 (I

wicd recommends no packages.

Versions of packages wicd suggests:
ii  pm-utils                      1.1.2.4-1  utilities and scripts for power ma

-- no debconf information