(Thanks to everyone who is taking the time out of their day to look into
this.)

I think I should note that I can't replicate this issue reliably. It
happened "at random" and it didn't happen again since I filed this
report. It's just that it wasn't the first time it happened and I saw
others have similar issues. That is why I reported it.

Again I want to preface that the extensions shown in the list are the
once which came pre-installed with Ubuntu 18.04 (iirc) and I never
touched them. (I have some indicator apps but I assume you don't mean
them.) I also don't understand why I should disable stock Ubuntu
extensions that provide basic functionality like the dock. Would you
consider disabling the dock a solution or do you simply try to pin down
the culprit?

With that said I can explain the seemingly contractionary pictures. The
gnome Tweaks app shows a wrong state. The extensions app shows the
correct state. Screenshot attached. This must be a bug in gnome Tweaks.

The gsettings file shows something interesting:
According to the file I have two extensions active that I can't remember ever 
installing and that do not show up anywhere: org.gnome.shell enabled-extensions 
['update-extensi...@franglais125.gmail.com', 'move_cl...@rmy.pobox.com']

File attached.

Could it be that there are extensions active that I or someone living
with me installed in the past but don't show up in the extensions
settings? If yes how do I remove them for further bug testing?

** Attachment added: "Screenshot from 2020-06-11.png"
   
https://bugs.launchpad.net/ubuntu/+source/gnome-shell/+bug/1882353/+attachment/5383086/+files/Screenshot%20from%202020-06-11.png

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/1882353

Title:
  Ubuntu Dock and Top bar accessible from lockscreen

Status in gnome-shell package in Ubuntu:
  Incomplete

Bug description:
  This is a very serious security issue:

  When I lock my desktop with SUPER (windows) + L my screen gets locked
  and goes to black. Sometimes when I return to my PC and move my mouse
  to turn my screen back on I notice that the Ubuntu Dock + the Top Bar
  are accessible from the lockscreen.

  I unfortunately can't remember if they were accessible from the moment
  I locked the screen or became accessible after returning from fade to
  black. (This is not the first time this issue happened.)

  I was able to open the settings menu from the top bar and use all
  indicators. You can actually start the programs in the Ubuntu Dock and
  give keyboard inputs to them. For example I was able to start the
  terminal emulator from the lock screen and run firefox and other
  applications. So an attacker could run arbitrary commands with user
  privileges from the lockscreen!

  The indicators drop down menus were fully visible on the lock screen
  while the Dock applications remained hidden "behind" the lockscreen
  (however still accessible via keyboard as described above).

  I have attached a screenshot of the bug. I unfortunately had no camera
  at hand to film me running terminal commands.

  Please contact me if you need additional information.

  ProblemType: Bug
  DistroRelease: Ubuntu 20.04
  Package: gnome-shell-extension-ubuntu-dock 67ubuntu20.04.5
  ProcVersionSignature: Ubuntu 5.4.0-33.37-generic 5.4.34
  Uname: Linux 5.4.0-33-generic x86_64
  NonfreeKernelModules: nvidia_modeset nvidia
  ApportVersion: 2.20.11-0ubuntu27.2
  Architecture: amd64
  CasperMD5CheckResult: skip
  CurrentDesktop: ubuntu:GNOME
  Date: Sat Jun  6 13:35:28 2020
  InstallationDate: Installed on 2015-12-22 (1627 days ago)
  InstallationMedia: Ubuntu 15.10 "Wily Werewolf" - Release amd64 (20151021)
  PackageArchitecture: all
  SourcePackage: gnome-shell-extension-ubuntu-dock
  UpgradeStatus: Upgraded to focal on 2020-04-25 (42 days ago)
  modified.conffile..etc.default.apport: [modified]
  mtime.conffile..etc.default.apport: 2015-12-23T12:07:53.769719

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-shell/+bug/1882353/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to