Re: how to set the connection.permissions to empty for all new connections

[Jelle de Jong <jelledejong powercraft nl>]

Thank you Thomas for the reply, much appreciated.

Your answer explains why I am having a hard time finding an answer.

How do I find and change the PolicyKit permissions for the 
connection.permissions for regular users. We are the using 
network-manager-gnome 1.8.10-2ubuntu3mint1.

root@laptop01:~# sudo su jdoe -c "nmcli general permissions"
PERMISSION                                                        VALUE
org.freedesktop.NetworkManager.enable-disable-network             no
org.freedesktop.NetworkManager.enable-disable-wifi                no
org.freedesktop.NetworkManager.enable-disable-wwan                no
org.freedesktop.NetworkManager.enable-disable-wimax               no
org.freedesktop.NetworkManager.sleep-wake                         no
org.freedesktop.NetworkManager.network-control                    auth
org.freedesktop.NetworkManager.wifi.share.protected               no
org.freedesktop.NetworkManager.wifi.share.open                    no
org.freedesktop.NetworkManager.settings.modify.system             auth
org.freedesktop.NetworkManager.settings.modify.own                auth
org.freedesktop.NetworkManager.settings.modify.hostname           auth
org.freedesktop.NetworkManager.settings.modify.global-dns         auth
org.freedesktop.NetworkManager.reload                             auth
org.freedesktop.NetworkManager.checkpoint-rollback                auth
org.freedesktop.NetworkManager.enable-disable-statistics          no
org.freedesktop.NetworkManager.enable-disable-connectivity-check  no


root@laptop01:~# nmcli general permissions
PERMISSION                                                        VALUE
org.freedesktop.NetworkManager.enable-disable-network             yes
org.freedesktop.NetworkManager.enable-disable-wifi                yes
org.freedesktop.NetworkManager.enable-disable-wwan                yes
org.freedesktop.NetworkManager.enable-disable-wimax               yes
org.freedesktop.NetworkManager.sleep-wake                         yes
org.freedesktop.NetworkManager.network-control                    yes
org.freedesktop.NetworkManager.wifi.share.protected               yes
org.freedesktop.NetworkManager.wifi.share.open                    yes
org.freedesktop.NetworkManager.settings.modify.system             yes
org.freedesktop.NetworkManager.settings.modify.own                yes
org.freedesktop.NetworkManager.settings.modify.hostname           yes
org.freedesktop.NetworkManager.settings.modify.global-dns         yes
org.freedesktop.NetworkManager.reload                             yes
org.freedesktop.NetworkManager.checkpoint-rollback                yes
org.freedesktop.NetworkManager.enable-disable-statistics          yes
org.freedesktop.NetworkManager.enable-disable-connectivity-check  yes

On 2020-03-11 11:20, Thomas Haller wrote:
> On Wed, 2020-03-11 at 10:54 +0100, Jelle de Jong via networkmanager-
> list wrote:
> > Hello everybody,
> >
> > I want my users to make wifi connections and have them automatic
> > connect
> > without the having to be login first, so I want the connection to be
> > shared across all users.
> >
> > It is my understanding that the connection.permissions is preventing
> > this when it is set:
> >
> > permissions=user:jdoe:;
> >
> > How can I change the network manager default to not sent any
> > permissions
> > for new connections created?
>
>
> Hi,
>
> there is no "network manager default". Whatever client tool you use to
> create/modify the profile, sets this value. So, your question depends
> on which tool you use.
>
> Also, I think most tools would default to not restrict the permissions,
> unless the PolicyKit permissions would prevent to modify the profile in
> that way. So, the default depends on your policy kit permissions
> (`nmcli general permissions`).
>
>
> best,
> Thomas