networkmanager-no-modify-system-patch

Patch to stop letting all logged-in users modify NM system connections

READ THIS BEFORE USING THIS PACKAGE. Official Gentoo packaging of NetworkManager >=1.42.6 unconditionally sets a nondefault build-time option (-Dmodify_system=true) that allows ALL logged in users to modify system connections, including reading network credentials (https://bugs.gentoo.org/905668). This ebuild provides a patch to the configure script that disables the logic behind this option, so that network settings are again protected from untrusted users and programs. This ebuild is package.masked by default as it has the potential to break the build of NetworkManager, especially on ~arch when a new version of NetworkManager is released and the patch no longer applies cleanly. Pings are welcome if things break on unstable and I haven't updated the patch yet. After installing this package for the first time, rebuilding net-misc/networkmanager is required.

homepage ↗