hi,

i've just done a fresh install of Lubuntu saucy 13.10 and I can confirm
that lightdm  is not keeping the system locked.

Comment #8 is correct.

- lock the screen with "Shutdown > Lock Screen" ;
- on lightdm screen, just do ctrl+alt+F7 : you arrive on the desktop, without 
typing any password.

I believe it's a security issue once anyone is able to log into your
machine without typing any password.

let me know if you need more info.

the guy from webupd8 also got the bug at his article:
http://www.webupd8.org/2013/10/see-whats-new-in-1310-release-of.html

from the article:
"    XScreensaver has been removed (LightDM is now used for screen locking but 
there's a pretty serious bug here unless I'm missing something: if you switch 
to TTY7 after locking the screen - using Ctrl + Alt + 7 -, you can access the 
desktop without having to unlock the screen so without having to enter any 
password!);    "

best regards,
ibere


** Changed in: lightdm (Ubuntu)
       Status: Invalid => Confirmed

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1205384

Title:
  Lock can be circumvented by switching to console

Status in “lightdm” package in Ubuntu:
  Confirmed
Status in “lxsession” package in Ubuntu:
  Confirmed

Bug description:
  Steps to reproduce:
  1)lock your screen using "dm-tool switch-to-greeter" or "dm-tool lock"
  2)switch to console via ctrl+alt+F1
  3)switch back to X via ctrl+alt+F7
  Result: session is unlocked without entering a password

  Expected behaviour:
  session should still be locked when switching back to X

  ProblemType: Bug
  DistroRelease: Ubuntu 13.10
  Package: lightdm 1.7.7-0ubuntu2
  ProcVersionSignature: Ubuntu 3.10.0-5.15-generic 3.10.2
  Uname: Linux 3.10.0-5-generic i686
  ApportVersion: 2.11-0ubuntu1
  Architecture: i386
  Date: Fri Jul 26 17:30:23 2013
  InstallationDate: Installed on 2013-07-26 (0 days ago)
  InstallationMedia: Lubuntu 13.10 "Saucy Salamander" - Alpha i386 (20130723.1)
  MarkForUpload: True
  SourcePackage: lightdm
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lightdm/+bug/1205384/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to