linux-kernel - Re: 4.1 to 4.4 regression: Gnome 2 password management asks too late

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:	Sun, 17 Jan 2016 00:16:55 +0100
From:	Pavel Machek <pavel@....cz>
To:	kernel list <linux-kernel@...r.kernel.org>
Subject: Re: 4.1 to 4.4 regression: Gnome 2 password management asks too late

Hi!

> On v4.1, Gnome2 boots, notices wlan is encrypted, and asks "enter
> password to unlock your login keyring", so it can grab wlan password.
> 
> So far so good.
> 
> On v4.4, Gnome2 boots, asks for wlan password, then wants to store the
> password and asks "enter password to unlock your login keyring".
> 
> Not good.

Yeah. And yes, its kernel, but solution seems to be easy (and probably
not a regression).

On 4.4, wlan interface changes hardware address with each boot due to
missing patches... and that makes Gnome2 behave as it does.
									Pavel
-- 
(english) http://www.livejournal.com/~pavelmachek
(cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html