Bug#382241: [pkg-wpa-devel] Bug#382241: wpasupplicant: Please enforce tight permissions on /etc/network/interfaces

[Reinhard Tartler]

Christoph Biedl <cbiedl at gmx.de> writes:

> If you agree: 
> * In postinst: Check whether /e/n/i permissions are 660 or tighter and
>   offer to fix them if required.

I don't really agree here, as I don't see the necessity to bug the
user with an additional question. Instead, we should answer the
question for the user. 

Unfortunately, /e/n/i is not the business of wpasupplicant, but of
ifupdown.

> * If wpasupplicant reads credentials from /e/n/i and finds loose
>   permissions: Print a warning message on the console or at least via
>   syslog.

We could implement such a check in ifupdown.sh, but I don't think its
worth the trouble.

Kel, how do you think?

-- 
Gruesse/greetings,
Reinhard Tartler, KeyID 945348A4