Public bug reported: This is a bad Gnome Shell security flaw. When the screen is locked, nothing should be available. But I see the Dash do Dock extension and I can even start applications from it. Even though I cannot see the apps running, but when I unlock, I can see them. This is a huge security risk and should be fixed asap in Gnome. This is both in Ubuntu 17.10 and 18.04.
I have reported upstream, too: https://bugzilla.gnome.org/show_bug.cgi?id=795615 ProblemType: Bug DistroRelease: Ubuntu 18.04 Package: gnome-shell 3.28.1-0ubuntu2 ProcVersionSignature: Ubuntu 4.15.0-20.21-generic 4.15.17 Uname: Linux 4.15.0-20-generic x86_64 ApportVersion: 2.20.9-0ubuntu7 Architecture: amd64 CurrentDesktop: ubuntu:GNOME Date: Fri Apr 27 22:58:26 2018 DisplayManager: gdm3 GsettingsChanges: b'org.gnome.shell' b'enabled-extensions' b"['ubuntu-appindicat...@ubuntu.com', 'weather-extens...@xeked.com', 'dash-to-d...@micxgx.gmail.com', 'weatherinthecl...@jasonlg1979.github.io', 'ubuntu-d...@ubuntu.com']" b'org.gnome.shell' b'favorite-apps' redacted by apport b'org.gnome.desktop.interface' b'gtk-im-module' b"'gtk-im-context-simple'" b'org.gnome.desktop.interface' b'show-battery-percentage' b'true' b'org.gnome.desktop.interface' b'clock-show-date' b'true' InstallationDate: Installed on 2018-04-27 (0 days ago) InstallationMedia: Ubuntu 18.04 LTS "Bionic Beaver" - Release amd64 (20180426) SourcePackage: gnome-shell UpgradeStatus: No upgrade log present (probably fresh install) ** Affects: gnome-shell (Ubuntu) Importance: Undecided Status: New ** Tags: amd64 apport-bug bionic ** Attachment added: "extensions active in locked screen gnome-shell" https://bugs.launchpad.net/bugs/1767494/+attachment/5128881/+files/gnome-shell-security-bug-20180427_224542-mic.jpg -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1767494 Title: Some Gnome Shell extensions are visible and active in Lock Screen To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnome-shell/+bug/1767494/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
