*** This bug is a security vulnerability ***
Public security bug reported:
On ubuntu 10.04, I choose System > Disconnect > Swich User,
then at the login screen I click Ctrl+Alt+F4 to get a command line over a black
screen. the problem: clicking Alt+F7 redirect back to my password 'protected'
desktop WITHOUT entering password!
How is it possible and how can I fix it?
Description: Ubuntu 10.04.3 LTS
Release: 10.04
apt-cache policy login
login:
Installed: 1:4.1.4.2-1ubuntu2
Candidate: 1:4.1.4.2-1ubuntu2.2
I expect to go back to the login screen, NOT skipping the password. the
whole idea of a password is to protect the data...
p.s
I can't use "lock screen" because it aventualy freeze my desktop, & the only
release is the "reset" button.
** Affects: shadow (Ubuntu)
Importance: Undecided
Status: New
** Tags: login-screen password security
** Visibility changed to: Public
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/881147
Title:
alt+f7 gain full access to a password protected account
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shadow/+bug/881147/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
