about summary refs log tree commit diff
path: root/debian/network-manager.postinst
diff options
context:
space:
mode:
authorSebastien Bacher <seb128@ubuntu.com>2019-10-07 11:18:33 +0200
committerSebastien Bacher <seb128@ubuntu.com>2019-10-07 11:18:33 +0200
commit2db79403563179c1a29e6292172f5563acf13c70 (patch)
tree7ffefc53c347326e24f28785241f1409a1ecbbf6 /debian/network-manager.postinst
parent5b9d4e305df987ddad7f3d05afd709a70cddf7fd (diff)
parent790e3946f0274a272fdda4d8697ce31a757a48d2 (diff)
Merge remote-tracking branch 'salsa/master'
Diffstat (limited to 'debian/network-manager.postinst')
-rw-r--r--debian/network-manager.postinst9
1 files changed, 9 insertions, 0 deletions
diff --git a/debian/network-manager.postinst b/debian/network-manager.postinst
index e4fb2981..a4ea9a21 100644
--- a/debian/network-manager.postinst
+++ b/debian/network-manager.postinst
@@ -31,6 +31,9 @@ case "$1" in
             invoke-rc.d dbus force-reload || true
         fi
 
+        # This directory can contain sensitive data and should not be world-readable
+        chmod 0700 /var/lib/NetworkManager
+
         NIF=/etc/network/interfaces
         if [ -z "$2" ] && [ -f $NIF ]; then
             ifaces=`grep -v '^#' $NIF | awk '/iface/ {print $2}' | sort -u | sed -e 's/lo//' -e '/^$/d' -e 's/^/- /'`
@@ -60,6 +63,12 @@ case "$1" in
 			touch /etc/NetworkManager/conf.d/10-globally-managed-devices.conf
 		fi
 	fi
+
+        if dpkg --compare-versions "$2" lt-nl "1.20.4-2"; then
+            if [ -f /var/lib/NetworkManager/secret_key ]; then
+                chmod 0600 /var/lib/NetworkManager/secret_key
+            fi
+        fi
         ;;
 
     abort-upgrade|abort-deconfigure|abort-remove)