Updated the Status to "FixReleased" as it's not possible to do this anymore on the latest 16.04 LTS release with NetworkManager 1.2.x, as guest users no longer have sufficient permission to add new connections.
Retrofitting this to the version of NM in 14.04 might be a challenging as the version of NM (and other components) in trusty is currently based on NM 0.9.8.*. If this is important to anyone, please first confirm the behavior on a 14.04 LTS system and detail your testing in this bug, although it's doubtful we'd fix. ** Changed in: network-manager (Ubuntu) Status: Incomplete => Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to network-manager in Ubuntu. https://bugs.launchpad.net/bugs/1055068 Title: Guest user can use arbitrary MAC addresses Status in network-manager package in Ubuntu: Fix Released Bug description: In Quantal, as a guest user you can create a network connection with an arbitrary mac address - I take that as a security hole (being able to break another machine on the network). (actually in this case the guest user you get to register a remote desktop account, you can get a terminal in it - that might be another security issue) Go to the network manager icon and edit connections Wired network Add connection Choose the eth0/deault device mac address Type in a MAC address of your own evil making in the 'cloned mac address' box Untick 'available to all users' and Save Now, you have a new connection, but it's not up Open a terminal and use nmcli con to list the network connections, and note the UUID of your new one. Now do nmcli con up uuid ..... where ..... is the UUID you just got. You're now spoofing someone elses MAC address. ProblemType: Bug DistroRelease: Ubuntu 12.10 Package: network-manager 0.9.6.0-0ubuntu7 ProcVersionSignature: Ubuntu 3.5.0-15.22-generic 3.5.4 Uname: Linux 3.5.0-15-generic x86_64 ApportVersion: 2.5.2-0ubuntu4 Architecture: amd64 CRDA: Error: command ['iw', 'reg', 'get'] failed with exit code 1: nl80211 not found. Date: Sun Sep 23 16:41:47 2012 IfupdownConfig: auto lo iface lo inet loopback InstallationMedia: Ubuntu 12.10 "Quantal Quetzal" - Alpha amd64+mac (20120905.2) IpRoute: default via 192.168.122.1 dev eth0 proto static 169.254.0.0/16 dev eth0 scope link metric 1000 192.168.122.0/24 dev eth0 proto kernel scope link src 192.168.122.34 metric 1 IwConfig: eth0 no wireless extensions. lo no wireless extensions. NetworkManager.state: [main] NetworkingEnabled=true WirelessEnabled=true WWANEnabled=true WimaxEnabled=true ProcEnviron: LANGUAGE=en_GB:en TERM=xterm PATH=(custom, no user) LANG=en_GB.UTF-8 SHELL=/bin/bash RfKill: SourcePackage: network-manager UpgradeStatus: No upgrade log present (probably fresh install) nmcli-con: NAME UUID TYPE TIMESTAMP TIMESTAMP-REAL AUTOCONNECT READONLY DBUS-PATH Wired connection 1 90a0ede6-43a8-4ad1-a26c-b17a52146725 802-3-ethernet 1348414780 Sun 23 Sep 2012 16:39:40 BST yes no /org/freedesktop/NetworkManager/Settings/0 nmcli-dev: DEVICE TYPE STATE DBUS-PATH eth0 802-3-ethernet connected /org/freedesktop/NetworkManager/Devices/0 nmcli-nm: RUNNING VERSION STATE NET-ENABLED WIFI-HARDWARE WIFI WWAN-HARDWARE WWAN running 0.9.6.0 connected enabled enabled enabled enabled disabled To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/1055068/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp