desktop-packages team mailing list archive

[Jamie Strandboge <jamie@xxxxxxxxxx>]

policykit doesn't give you much more over the bus policy as described
here for a single user system, since the policykit configuration would
also simply allow access to SetInterfaceFirmware without password. It
can give you more protection for remote shells (ssh or exploit in
installed software-- note, webbrowser-app (but not store webapps of
course) currently runs unconfined). Policykit may prove more flexible
down the line with multiuser as well.

Like I said, this dbus bus policy is ok for now, but I have a strong
suspicion it will need to be revisited for multiuser.

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to wpasupplicant in Ubuntu.
https://bugs.launchpad.net/bugs/1426923

Title:
  Allow ubuntu-system-settings to set a device's firmware

Status in wpasupplicant package in Ubuntu:
  In Progress

Bug description:
  Background:
  To do Wi-Fi hotspots on krillin, we need to poke wifi by doing a call to wpa_supplicant's (undocumented/local) SetInterfaceFirmware method. See [1] for details.

  Rationale:
  Ubuntu System Settings needs to do the same things as aforementioned script, but via dbus [2], as phablet/current non-privileged user and unconfined.

  What happens:
  If phablet runs [2], this error message [3] is produced, which I interpret to be equivalent with "you're not welcome here".

  What should happen instead:
  Ubuntu System Settings should be able to make the call to wpa.

  [1] http://bazaar.launchpad.net/~mathieu-tl/+junk/touch-hotspot/view/head:/hotspot.py
  [2] gdbus call --system -d fi.w1.wpa_supplicant1 -o /fi/w1/wpa_supplicant1 -m fi.w1.wpa_supplicant1.SetInterfaceFirmware / ap
  [3] http://pastebin.ubuntu.com/10489519/

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1426923/+subscriptions