[Bug 1055068] Re: Guest user can use arbitrary MAC addresses
Updated the Status to "FixReleased" as it's not possible to do this anymore on the latest 16.04 LTS release with NetworkManager 1.2.x, as guest users no longer have sufficient permission to add new connections. Retrofitting this to the version of NM in 14.04 might be a challenging as the version of NM (and other components) in trusty is currently based on NM 0.9.8.*. If this is important to anyone, please first confirm the behavior on a 14.04 LTS system and detail your testing in this bug, although it's doubtful we'd fix. ** Changed in: network-manager (Ubuntu) Status: Incomplete => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1055068 Title: Guest user can use arbitrary MAC addresses To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/1055068/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1055068] Re: Guest user can use arbitrary MAC addresses
** Changed in: network-manager (Ubuntu) Status: Triaged => Won't Fix ** Changed in: network-manager (Ubuntu) Status: Won't Fix => Fix Released ** Changed in: network-manager (Ubuntu) Status: Fix Released => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1055068 Title: Guest user can use arbitrary MAC addresses To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/1055068/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1055068] Re: Guest user can use arbitrary MAC addresses
** Tags removed: amd64 apport-bug quantal running-unity ** Tags added: nm-improvements -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1055068 Title: Guest user can use arbitrary MAC addresses To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/1055068/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1055068] Re: Guest user can use arbitrary MAC addresses
Well, I don't think I'd expect a guest to be able to set an arbitrary IP either. As for 'if you've got physical access all is lost' - that makes a lot of assumptions. For example in a school or something the actual machines and cabling might be in a security case with the cabling trunked down. Another example is that you could expect to leave a bunch of people in an area using guest accounts and not have to monitor them closely; you'd notice if they were diving behind the machine at the cabling. Is there a definition anywhere of what 'guest' should be able to do? Dave -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1055068 Title: Guest user can use arbitrary MAC addresses To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/1055068/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1055068] Re: Guest user can use arbitrary MAC addresses
I'm not quite sure how this is different than being able to collide with another IP address on the network. Both will allow a guest user to possibly cause a network outage. Besides, the guest user requires physical access to be used. If you have physical access, you can most likely unplug the network cable and plug in into a different laptop and do the same thing. Network-manager should probably gain an additional user right to change the mac address in any case, so users who are on the console but not in the admin group wouldn't be able to alter the system's mac address. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1055068 Title: Guest user can use arbitrary MAC addresses To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/1055068/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1055068] Re: Guest user can use arbitrary MAC addresses
** Changed in: network-manager (Ubuntu) Status: New => Triaged ** Changed in: network-manager (Ubuntu) Importance: Undecided => High -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1055068 Title: Guest user can use arbitrary MAC addresses To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/1055068/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1055068] Re: Guest user can use arbitrary MAC addresses
** This bug has been flagged as a security vulnerability -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1055068 Title: Guest user can use arbitrary MAC addresses To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/1055068/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
