desktop-packages team mailing list archive

[Tony Espy <1426923@xxxxxxxxxxxxxxxxxx>]

@Jamie

I asked Alfosno to prototype granting access with a DBus configuration
change alone as proof-of-concept.  Note, as the script we've been using
for testing is a Python script, the "Introspectable" fragment was
needed.  As system settings is Qt-based, this may not be needed.  We'll
need Jonas to confirm.

As this approach works, I'm not sure whether or not the added polkit
layer actually buys us much more security.  As previously mentioned, all
non-core click apps are confined, and cannot access DBus on their own.
The only way an unconfined phablet processes could land on the phone (
besides our core apps ) is if a user enables developer-mode and installs
the app via dpkg or directly via a binary installer, which means the
extra polkit protection could easily be circumvented.

I think a developer would also discover pretty quickly that a new app
was malicious if the WiFi hardware stopped working as a client, due to
it's being put into hotspot mode.

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to wpasupplicant in Ubuntu.
https://bugs.launchpad.net/bugs/1426923

Title:
  Allow ubuntu-system-settings to set a device's firmware

Status in wpasupplicant package in Ubuntu:
  Confirmed

Bug description:
  Background:
  To do Wi-Fi hotspots on krillin, we need to poke wifi by doing a call to wpa_supplicant's (undocumented/local) SetInterfaceFirmware method. See [1] for details.

  Rationale:
  Ubuntu System Settings needs to do the same things as aforementioned script, but via dbus [2], as phablet/current non-privileged user and unconfined.

  What happens:
  If phablet runs [2], this error message [3] is produced, which I interpret to be equivalent with "you're not welcome here".

  What should happen instead:
  Ubuntu System Settings should be able to make the call to wpa.

  [1] http://bazaar.launchpad.net/~mathieu-tl/+junk/touch-hotspot/view/head:/hotspot.py
  [2] gdbus call --system -d fi.w1.wpa_supplicant1 -o /fi/w1/wpa_supplicant1 -m fi.w1.wpa_supplicant1.SetInterfaceFirmware / ap
  [3] http://pastebin.ubuntu.com/10489519/

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1426923/+subscriptions