[Bug 1832309] Re: netplan stores wifi-password world-readable

Ɓukasz Zemczak 1832309 at bugs.launchpad.net
Fri Jul 19 14:43:51 UTC 2019


The /etc/netplan/01-netcfg.yaml file is generated by netcfg and is
unrelated to netplan.io itself (as netplan only comes into play when
parsing the file). This means that we essentially need to modify netcfg,
and possibly all other installers that generate netplan configs
(subiquity?), to not write the passphrase into a world-readable file. As
per Steve's input, I guess the best way would be do split the config
into two parts - one 'world-readable' with info that everyone should
have access to and one with secrets.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to netcfg in Ubuntu.
https://bugs.launchpad.net/bugs/1832309

Title:
  netplan stores wifi-password world-readable

Status in netcfg package in Ubuntu:
  Confirmed
Status in netplan.io package in Ubuntu:
  In Progress
Status in netcfg source package in Eoan:
  Confirmed
Status in netplan.io source package in Eoan:
  Won't Fix

Bug description:
  -rw-r--r-- 1 root root 293 Apr 11  2018 /etc/netplan/01-netcfg.yaml

  above file stores the wifi password in plain text!

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/netcfg/+bug/1832309/+subscriptions



More information about the foundations-bugs mailing list