[Bug 1832309] Re: netplan stores wifi-password world-readable
a security issue with medium importance not fixed for almost 2 years? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1832309 Title: netplan stores wifi-password world-readable To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/netcfg/+bug/1832309/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1832309] Re: netplan stores wifi-password world-readable
The Eoan Ermine has reached end of life, so this bug will not be fixed for that release ** Changed in: netcfg (Ubuntu Eoan) Status: Confirmed => Won't Fix -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1832309 Title: netplan stores wifi-password world-readable To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/netcfg/+bug/1832309/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1832309] Re: netplan stores wifi-password world-readable
(since this bug has come up in UbuntCore discussions and apparently scared some people) note that netplan configs on Ubuntu Core as created by subiquity are root-only readable, so UbuntuCore is not affected: $ ls -l /etc/netplan/00-snapd-config.yaml -rw--- 1 root root 138 Jul 25 13:19 /etc/netplan/00-snapd-config.yaml -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1832309 Title: netplan stores wifi-password world-readable To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/netcfg/+bug/1832309/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1832309] Re: netplan stores wifi-password world-readable
I am aware that as and when the live-server installer supports wifi at all I need to do something about this. I'm not sure what, but something :) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1832309 Title: netplan stores wifi-password world-readable To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/netcfg/+bug/1832309/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1832309] Re: netplan stores wifi-password world-readable
** Changed in: netplan.io (Ubuntu) Status: In Progress => Won't Fix ** Changed in: netplan.io (Ubuntu) Assignee: Łukasz Zemczak (sil2100) => (unassigned) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1832309 Title: netplan stores wifi-password world-readable To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/netcfg/+bug/1832309/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1832309] Re: netplan stores wifi-password world-readable
The /etc/netplan/01-netcfg.yaml file is generated by netcfg and is unrelated to netplan.io itself (as netplan only comes into play when parsing the file). This means that we essentially need to modify netcfg, and possibly all other installers that generate netplan configs (subiquity?), to not write the passphrase into a world-readable file. As per Steve's input, I guess the best way would be do split the config into two parts - one 'world-readable' with info that everyone should have access to and one with secrets. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1832309 Title: netplan stores wifi-password world-readable To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/netcfg/+bug/1832309/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1832309] Re: netplan stores wifi-password world-readable
** Also affects: netcfg (Ubuntu) Importance: Undecided Status: New ** Changed in: netplan.io (Ubuntu Eoan) Status: In Progress => Won't Fix ** Changed in: netcfg (Ubuntu Eoan) Importance: Undecided => Medium ** Changed in: netplan.io (Ubuntu Eoan) Assignee: Łukasz Zemczak (sil2100) => (unassigned) ** Changed in: netcfg (Ubuntu Eoan) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1832309 Title: netplan stores wifi-password world-readable To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/netcfg/+bug/1832309/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1832309] Re: netplan stores wifi-password world-readable
** Changed in: netplan.io (Ubuntu Eoan) Assignee: (unassigned) => Łukasz Zemczak (sil2100) ** Changed in: netplan.io (Ubuntu Eoan) Status: Confirmed => In Progress -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1832309 Title: netplan stores wifi-password world-readable To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/netplan.io/+bug/1832309/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1832309] Re: netplan stores wifi-password world-readable
** Tags added: id-5d14ed4981f5ba74a04b0aa9 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1832309 Title: netplan stores wifi-password world-readable To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/netplan.io/+bug/1832309/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1832309] Re: netplan stores wifi-password world-readable
** Also affects: netplan.io (Ubuntu Eoan) Importance: High Status: New ** Changed in: netplan.io (Ubuntu Eoan) Status: New => Confirmed ** Tags removed: rls-ee-incoming ** Tags added: eoan -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1832309 Title: netplan stores wifi-password world-readable To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/netplan.io/+bug/1832309/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1832309] Re: netplan stores wifi-password world-readable
** Changed in: netplan.io (Ubuntu) Importance: Undecided => High ** Tags added: rls-ee-incoming -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1832309 Title: netplan stores wifi-password world-readable To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/netplan.io/+bug/1832309/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1832309] Re: netplan stores wifi-password world-readable
** Package changed: plan (Ubuntu) => netplan.io (Ubuntu) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1832309 Title: netplan stores wifi-password world-readable To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/netplan.io/+bug/1832309/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1832309] Re: netplan stores wifi-password world-readable
** Information type changed from Public to Public Security -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1832309 Title: netplan stores wifi-password world-readable To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/plan/+bug/1832309/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
