Package: wpasupplicant
Version: 0.5.4-2
Severity: wishlist
Quite some time ago wpasupplicant became configurable via
/etc/network/interfaces (/e/n/i). Thanks a lot for that, this was a big
improvement since it drastically eased the configuration.
However I'm a bit concerned since /e/n/i usually has 644 permissions, in
other words: Every user on that computer can read the credentials for
e.g. WPA authentification. Although we can assume wpasupplicant is
mostly used on notebook where just one user account and that user has
root access, too - I think it's wise to a "Better safe then sorry" here.
If you agree:
* In postinst: Check whether /e/n/i permissions are 660 or tighter and
offer to fix them if required.
* If wpasupplicant reads credentials from /e/n/i and finds loose
permissions: Print a warning message on the console or at least via
syslog.
Thanks,
Christoph
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
