[Touch-packages] [Bug 1205384] Re: Lock can be circumvented by switching to console
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: lightdm (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1205384 Title: Lock can be circumvented by switching to console Status in LXDE: New Status in lightdm package in Ubuntu: Confirmed Status in lxsession package in Ubuntu: Fix Released Bug description: Steps to reproduce: 1)lock your screen using "dm-tool switch-to-greeter" or "dm-tool lock" 2)switch to console via ctrl+alt+F1 3)switch back to X via ctrl+alt+F7 Result: session is unlocked without entering a password Expected behaviour: session should still be locked when switching back to X ProblemType: Bug DistroRelease: Ubuntu 13.10 Package: lightdm 1.7.7-0ubuntu2 ProcVersionSignature: Ubuntu 3.10.0-5.15-generic 3.10.2 Uname: Linux 3.10.0-5-generic i686 ApportVersion: 2.11-0ubuntu1 Architecture: i386 Date: Fri Jul 26 17:30:23 2013 InstallationDate: Installed on 2013-07-26 (0 days ago) InstallationMedia: Lubuntu 13.10 "Saucy Salamander" - Alpha i386 (20130723.1) MarkForUpload: True SourcePackage: lightdm UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/lxde/+bug/1205384/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1205384] Re: Lock can be circumvented by switching to console
Hi smurfendrek, Please check jarnos comment #89, you need to use light-locker, using dm-tool for lock is not recommended. You could also try with other screen lockers program. Also this is an old bug, if you are still experiencing the problem, please open a new bug. I am unsubscribing the security team from this ticket. If needed please subscribe it again. ** Information type changed from Public Security to Public -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1205384 Title: Lock can be circumvented by switching to console Status in LXDE: New Status in lightdm package in Ubuntu: New Status in lxsession package in Ubuntu: Fix Released Bug description: Steps to reproduce: 1)lock your screen using "dm-tool switch-to-greeter" or "dm-tool lock" 2)switch to console via ctrl+alt+F1 3)switch back to X via ctrl+alt+F7 Result: session is unlocked without entering a password Expected behaviour: session should still be locked when switching back to X ProblemType: Bug DistroRelease: Ubuntu 13.10 Package: lightdm 1.7.7-0ubuntu2 ProcVersionSignature: Ubuntu 3.10.0-5.15-generic 3.10.2 Uname: Linux 3.10.0-5-generic i686 ApportVersion: 2.11-0ubuntu1 Architecture: i386 Date: Fri Jul 26 17:30:23 2013 InstallationDate: Installed on 2013-07-26 (0 days ago) InstallationMedia: Lubuntu 13.10 "Saucy Salamander" - Alpha i386 (20130723.1) MarkForUpload: True SourcePackage: lightdm UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/lxde/+bug/1205384/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1205384] Re: Lock can be circumvented by switching to console
** Tags added: lightdm lock -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1205384 Title: Lock can be circumvented by switching to console Status in LXDE: New Status in lightdm package in Ubuntu: New Status in lxsession package in Ubuntu: Fix Released Bug description: Steps to reproduce: 1)lock your screen using "dm-tool switch-to-greeter" or "dm-tool lock" 2)switch to console via ctrl+alt+F1 3)switch back to X via ctrl+alt+F7 Result: session is unlocked without entering a password Expected behaviour: session should still be locked when switching back to X ProblemType: Bug DistroRelease: Ubuntu 13.10 Package: lightdm 1.7.7-0ubuntu2 ProcVersionSignature: Ubuntu 3.10.0-5.15-generic 3.10.2 Uname: Linux 3.10.0-5-generic i686 ApportVersion: 2.11-0ubuntu1 Architecture: i386 Date: Fri Jul 26 17:30:23 2013 InstallationDate: Installed on 2013-07-26 (0 days ago) InstallationMedia: Lubuntu 13.10 "Saucy Salamander" - Alpha i386 (20130723.1) MarkForUpload: True SourcePackage: lightdm UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/lxde/+bug/1205384/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1205384] Re: Lock can be circumvented by switching to console
When trying to circumvent the lock on gnome with lightdm, it seems that the exploit only works when using gnome on X. The exploit does not seem to work when using gnome on wayland with lightdm. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1205384 Title: Lock can be circumvented by switching to console Status in LXDE: New Status in lightdm package in Ubuntu: New Status in lxsession package in Ubuntu: Fix Released Bug description: Steps to reproduce: 1)lock your screen using "dm-tool switch-to-greeter" or "dm-tool lock" 2)switch to console via ctrl+alt+F1 3)switch back to X via ctrl+alt+F7 Result: session is unlocked without entering a password Expected behaviour: session should still be locked when switching back to X ProblemType: Bug DistroRelease: Ubuntu 13.10 Package: lightdm 1.7.7-0ubuntu2 ProcVersionSignature: Ubuntu 3.10.0-5.15-generic 3.10.2 Uname: Linux 3.10.0-5-generic i686 ApportVersion: 2.11-0ubuntu1 Architecture: i386 Date: Fri Jul 26 17:30:23 2013 InstallationDate: Installed on 2013-07-26 (0 days ago) InstallationMedia: Lubuntu 13.10 "Saucy Salamander" - Alpha i386 (20130723.1) MarkForUpload: True SourcePackage: lightdm UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/lxde/+bug/1205384/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1205384] Re: Lock can be circumvented by switching to console
When using lightdm with gnome, the exploit works in exactly the same ways as the original bug, just by switching tty's the lock can be circumvented. ** Also affects: lightdm (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1205384 Title: Lock can be circumvented by switching to console Status in LXDE: New Status in lightdm package in Ubuntu: New Status in lxsession package in Ubuntu: Fix Released Bug description: Steps to reproduce: 1)lock your screen using "dm-tool switch-to-greeter" or "dm-tool lock" 2)switch to console via ctrl+alt+F1 3)switch back to X via ctrl+alt+F7 Result: session is unlocked without entering a password Expected behaviour: session should still be locked when switching back to X ProblemType: Bug DistroRelease: Ubuntu 13.10 Package: lightdm 1.7.7-0ubuntu2 ProcVersionSignature: Ubuntu 3.10.0-5.15-generic 3.10.2 Uname: Linux 3.10.0-5-generic i686 ApportVersion: 2.11-0ubuntu1 Architecture: i386 Date: Fri Jul 26 17:30:23 2013 InstallationDate: Installed on 2013-07-26 (0 days ago) InstallationMedia: Lubuntu 13.10 "Saucy Salamander" - Alpha i386 (20130723.1) MarkForUpload: True SourcePackage: lightdm UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/lxde/+bug/1205384/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
