Public bug reported: To reproduce on lubuntu with both ibus and fcitx installed log into the guest session after an install on lubuntu 15.10 in the menu open language selector and change the input method from either ibus to fcitx or fcitx to ibus and then click onto apply system wide and the regular user will have their input method changed after logging out of the guest session and logging in as a regular user. Description: Ubuntu Wily Werewolf (development branch) Release: 15.10
fcitx: Installed: 1:4.2.9-1 Candidate: 1:4.2.9-1 Version table: *** 1:4.2.9-1 0 500 http://us.archive.ubuntu.com/ubuntu/ wily/main i386 Packages 100 /var/lib/dpkg/status ibus: Installed: 1.5.10-1ubuntu1 Candidate: 1.5.10-1ubuntu1 Version table: *** 1.5.10-1ubuntu1 0 500 http://us.archive.ubuntu.com/ubuntu/ wily/main i386 Packages 100 /var/lib/dpkg/status language-selector-gnome: Installed: 0.147 Candidate: 0.147 Version table: *** 0.147 0 500 http://us.archive.ubuntu.com/ubuntu/ wily/main i386 Packages 100 /var/lib/dpkg/status Description: Ubuntu Wily Werewolf (development branch) Release: 15.10 I expected a need to authenticate to change system wide settings Instead I could change all users installed input methods witout a password. Not really sure this is a secruity vulnerability. I have not yet tried with flavors other than lubuntu. ProblemType: Bug DistroRelease: Ubuntu 15.10 Package: language-selector-gnome 0.147 ProcVersionSignature: Ubuntu 4.1.0-3.3-generic 4.1.3 Uname: Linux 4.1.0-3-generic i686 ApportVersion: 2.18-0ubuntu7 Architecture: i386 CurrentDesktop: LXDE Date: Wed Aug 19 14:30:00 2015 ExecutablePath: /usr/bin/gnome-language-selector InstallationDate: Installed on 2015-08-19 (0 days ago) InstallationMedia: Lubuntu 15.10 "Wily Werewolf" - Alpha i386 (20150819) InterpreterPath: /usr/bin/python3.4 PackageArchitecture: all SourcePackage: language-selector UpgradeStatus: No upgrade log present (probably fresh install) ** Affects: language-selector (Ubuntu) Importance: Undecided Status: New ** Tags: apport-bug i386 wily -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to language-selector in Ubuntu. https://bugs.launchpad.net/bugs/1486751 Title: in lubnutu the input method for all users can be changed from the guest session. Status in language-selector package in Ubuntu: New Bug description: To reproduce on lubuntu with both ibus and fcitx installed log into the guest session after an install on lubuntu 15.10 in the menu open language selector and change the input method from either ibus to fcitx or fcitx to ibus and then click onto apply system wide and the regular user will have their input method changed after logging out of the guest session and logging in as a regular user. Description: Ubuntu Wily Werewolf (development branch) Release: 15.10 fcitx: Installed: 1:4.2.9-1 Candidate: 1:4.2.9-1 Version table: *** 1:4.2.9-1 0 500 http://us.archive.ubuntu.com/ubuntu/ wily/main i386 Packages 100 /var/lib/dpkg/status ibus: Installed: 1.5.10-1ubuntu1 Candidate: 1.5.10-1ubuntu1 Version table: *** 1.5.10-1ubuntu1 0 500 http://us.archive.ubuntu.com/ubuntu/ wily/main i386 Packages 100 /var/lib/dpkg/status language-selector-gnome: Installed: 0.147 Candidate: 0.147 Version table: *** 0.147 0 500 http://us.archive.ubuntu.com/ubuntu/ wily/main i386 Packages 100 /var/lib/dpkg/status Description: Ubuntu Wily Werewolf (development branch) Release: 15.10 I expected a need to authenticate to change system wide settings Instead I could change all users installed input methods witout a password. Not really sure this is a secruity vulnerability. I have not yet tried with flavors other than lubuntu. ProblemType: Bug DistroRelease: Ubuntu 15.10 Package: language-selector-gnome 0.147 ProcVersionSignature: Ubuntu 4.1.0-3.3-generic 4.1.3 Uname: Linux 4.1.0-3-generic i686 ApportVersion: 2.18-0ubuntu7 Architecture: i386 CurrentDesktop: LXDE Date: Wed Aug 19 14:30:00 2015 ExecutablePath: /usr/bin/gnome-language-selector InstallationDate: Installed on 2015-08-19 (0 days ago) InstallationMedia: Lubuntu 15.10 "Wily Werewolf" - Alpha i386 (20150819) InterpreterPath: /usr/bin/python3.4 PackageArchitecture: all SourcePackage: language-selector UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/language-selector/+bug/1486751/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp