** Also affects: unity/7.2
Importance: Undecided
Status: New
** Changed in: unity/7.2
Milestone: None => 7.2.5
** Changed in: unity/7.2
Status: New => In Progress
** Changed in: unity/7.2
Importance: Undecided => Medium
** Changed in: unity
Importance: Undecided => Medium
** Changed in: unity/7.2
Assignee: (unassigned) => Stephen M. Webb (bregma)
** Changed in: unity (Ubuntu)
Importance: Undecided => Medium
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to unity in Ubuntu.
https://bugs.launchpad.net/bugs/1413790
Title:
It's possible to bypasss lockscreen if user is in nopasswdlogin group.
Status in Unity:
Fix Released
Status in Unity 7.2 series:
In Progress
Status in unity package in Ubuntu:
Fix Released
Bug description:
Lightdm should not emit logind "unlock" signal when the user is not
prompted for a password. This can lead to a security issue:
# Log-in (unity session).
# Add the current user to nopasswdlogin group.
# Lock the sessions.
# Session indicator->Switch account...
# "Login" in again.
Expected behavior:
The lockscreen is still active.
Current behavior:
The session in unlocked.
We could workaround the issue directly in unity, but IMHO would be
cleaner to avoid that lightdm is emitting the logind signal.
To manage notifications about this bug go to:
https://bugs.launchpad.net/unity/+bug/1413790/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
