touch-packages team mailing list archive

[Marc Deslauriers <marc.deslauriers@xxxxxxxxxxxxx>]

The version of Ubuntu this bug applied to has been out of support for a
long time now. Closing.

** Changed in: gnome-system-tools (Ubuntu)
       Status: Confirmed => Won't Fix

** Changed in: network-manager (Ubuntu)
       Status: Confirmed => Won't Fix

** Changed in: policykit-1 (Ubuntu)
       Status: Confirmed => Won't Fix

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to network-manager in Ubuntu.
https://bugs.launchpad.net/bugs/326135

Title:
  policykit introduction broke unix user groups

Status in gnome-system-tools package in Ubuntu:
  Won't Fix
Status in network-manager package in Ubuntu:
  Won't Fix
Status in policykit package in Ubuntu:
  Invalid
Status in policykit-1 package in Ubuntu:
  Won't Fix
Status in ubuntu-meta package in Ubuntu:
  Invalid

Bug description:
  I have set up a number of user accounts. On one of these accounts I
  adjusted the user privileges (System->Administration->Users and
  Groups->Properties->User Privileges). For one particular user I de-
  selected the two options:

      * Connect to Internet using a modem
      * Connect to wireless and ethernet networks

  However, despite disabling access to the internet, the user is still
  able to connect to the internet through a wireless connection.

  I am assuming that this is a security vulnerability, because the
  intention is to deny access and this doesn't occur.

  I am using Ubuntu 8.10

  ----

  Policykit has been introduced without supporting the unix groups.
  (used by admins and set up by the installer)

  i.e. It is possible to create a policy that just said "yes" rather than "auth_*" where the default was "no", for anyone in the netdev group
  so theiy could do it without a password.

  -> we should ship PolicyKit config files that make use of these
  groups.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-system-tools/+bug/326135/+subscriptions