[Bug 1410195] Re: Able to bypass screen lock.
** Changed in: openldap (Ubuntu) Importance: Undecided = Critical ** Changed in: policykit-1 (Ubuntu) Importance: Undecided = Critical -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1410195 Title: Able to bypass screen lock. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/light-locker/+bug/1410195/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1410195] Re: Able to bypass screen lock.
** Changed in: openldap (Ubuntu) Importance: Undecided = Critical ** Changed in: policykit-1 (Ubuntu) Importance: Undecided = Critical -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openldap in Ubuntu. https://bugs.launchpad.net/bugs/1410195 Title: Able to bypass screen lock. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/light-locker/+bug/1410195/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1410195] Re: Able to bypass screen lock.
** Description changed: - Because of light locker being added to Xubuntu, it's now possible to - bypass the screen lock. + HOW TO REPRODUCE: + 1. Create an user account with password. + 2. Login in the new account using the XFCE desktop environment. + 3. Lock the screen. + 4. Hit the Ctrl+Alt+F7 key combination. - light-locker creates a lockscreen on VT8 - however, we can switch back - to the original VT using keyboard commands, meaning that we have full - access to the user's desktop. + EXPECTED BEHAVIOUR: + - The user session to be unavailable due to no password being entered. - - Steps: - - Install Xubuntu - Create user with password - Login as that user - Lock screen (xflock4 or ctrl+alt+delete) - Hit Ctrl+alt+f7 - Use the system without using a password to unlock. + REAL BEHAVIOUR: + - The session is accessible without entering its password, due to the VT8 being bypassed to the original VT using the Ctrl+Alt+F7 key combination. ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: light-locker 1.4.0-0ubuntu1 ProcVersionSignature: Ubuntu 3.13.0-43.72-generic 3.13.11.11 Uname: Linux 3.13.0-43-generic x86_64 ApportVersion: 2.14.1-0ubuntu3.6 Architecture: amd64 CurrentDesktop: XFCE Date: Tue Jan 13 10:34:10 2015 InstallationDate: Installed on 2015-01-06 (6 days ago) InstallationMedia: Xubuntu 14.04 LTS Trusty Tahr - Release amd64 (20140416.2) ProcEnviron: - LANGUAGE=en_GB:en - PATH=(custom, no user) - LANG=en_GB.UTF-8 - SHELL=/bin/zsh + LANGUAGE=en_GB:en + PATH=(custom, no user) + LANG=en_GB.UTF-8 + SHELL=/bin/zsh SourcePackage: light-locker UpgradeStatus: No upgrade log present (probably fresh install) ** Summary changed: - Able to bypass screen lock. + Ctrl+Alt+F7 bypasses the lock-screen under XFCE ** Also affects: hundredpapercuts Importance: Undecided Status: New ** Changed in: hundredpapercuts Status: New = Confirmed ** Changed in: hundredpapercuts Importance: Undecided = Critical ** Summary changed: - Ctrl+Alt+F7 bypasses the lock-screen under XFCE + Ctrl+Alt+F7 bypasses the light-locker lock-screen under XFCE ** Summary changed: - Ctrl+Alt+F7 bypasses the light-locker lock-screen under XFCE + Ctrl+Alt+F7 bypasses light-locker lock-screen under XFCE ** Summary changed: - Ctrl+Alt+F7 bypasses light-locker lock-screen under XFCE + Ctrl+Alt+F7 bypasses the light-locker lock-screen under XFCE -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openldap in Ubuntu. https://bugs.launchpad.net/bugs/1410195 Title: Ctrl+Alt+F7 bypasses the light-locker lock-screen under XFCE To manage notifications about this bug go to: https://bugs.launchpad.net/hundredpapercuts/+bug/1410195/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1410195] Re: Able to bypass screen lock.
** Description changed: - Because of light locker being added to Xubuntu, it's now possible to - bypass the screen lock. + HOW TO REPRODUCE: + 1. Create an user account with password. + 2. Login in the new account using the XFCE desktop environment. + 3. Lock the screen. + 4. Hit the Ctrl+Alt+F7 key combination. - light-locker creates a lockscreen on VT8 - however, we can switch back - to the original VT using keyboard commands, meaning that we have full - access to the user's desktop. + EXPECTED BEHAVIOUR: + - The user session to be unavailable due to no password being entered. - - Steps: - - Install Xubuntu - Create user with password - Login as that user - Lock screen (xflock4 or ctrl+alt+delete) - Hit Ctrl+alt+f7 - Use the system without using a password to unlock. + REAL BEHAVIOUR: + - The session is accessible without entering its password, due to the VT8 being bypassed to the original VT using the Ctrl+Alt+F7 key combination. ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: light-locker 1.4.0-0ubuntu1 ProcVersionSignature: Ubuntu 3.13.0-43.72-generic 3.13.11.11 Uname: Linux 3.13.0-43-generic x86_64 ApportVersion: 2.14.1-0ubuntu3.6 Architecture: amd64 CurrentDesktop: XFCE Date: Tue Jan 13 10:34:10 2015 InstallationDate: Installed on 2015-01-06 (6 days ago) InstallationMedia: Xubuntu 14.04 LTS Trusty Tahr - Release amd64 (20140416.2) ProcEnviron: - LANGUAGE=en_GB:en - PATH=(custom, no user) - LANG=en_GB.UTF-8 - SHELL=/bin/zsh + LANGUAGE=en_GB:en + PATH=(custom, no user) + LANG=en_GB.UTF-8 + SHELL=/bin/zsh SourcePackage: light-locker UpgradeStatus: No upgrade log present (probably fresh install) ** Summary changed: - Able to bypass screen lock. + Ctrl+Alt+F7 bypasses the lock-screen under XFCE ** Also affects: hundredpapercuts Importance: Undecided Status: New ** Changed in: hundredpapercuts Status: New = Confirmed ** Changed in: hundredpapercuts Importance: Undecided = Critical ** Summary changed: - Ctrl+Alt+F7 bypasses the lock-screen under XFCE + Ctrl+Alt+F7 bypasses the light-locker lock-screen under XFCE ** Summary changed: - Ctrl+Alt+F7 bypasses the light-locker lock-screen under XFCE + Ctrl+Alt+F7 bypasses light-locker lock-screen under XFCE ** Summary changed: - Ctrl+Alt+F7 bypasses light-locker lock-screen under XFCE + Ctrl+Alt+F7 bypasses the light-locker lock-screen under XFCE -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1410195 Title: Ctrl+Alt+F7 bypasses the light-locker lock-screen under XFCE To manage notifications about this bug go to: https://bugs.launchpad.net/hundredpapercuts/+bug/1410195/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1410195] Re: Able to bypass screen lock.
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: policykit-1 (Ubuntu) Status: New = Confirmed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openldap in Ubuntu. https://bugs.launchpad.net/bugs/1410195 Title: Able to bypass screen lock. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/light-locker/+bug/1410195/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1410195] Re: Able to bypass screen lock.
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: policykit-1 (Ubuntu) Status: New = Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1410195 Title: Able to bypass screen lock. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/light-locker/+bug/1410195/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1410195] Re: Able to bypass screen lock.
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: openldap (Ubuntu) Status: New = Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1410195 Title: Able to bypass screen lock. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/light-locker/+bug/1410195/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1410195] Re: Able to bypass screen lock.
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: openldap (Ubuntu) Status: New = Confirmed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openldap in Ubuntu. https://bugs.launchpad.net/bugs/1410195 Title: Able to bypass screen lock. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/light-locker/+bug/1410195/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1410195] Re: Able to bypass screen lock.
This issue is caused by Polkit not correctly working when box is installed as an LDAP client. ** Changed in: xubuntu-meta (Ubuntu) Status: Incomplete = Invalid ** Also affects: openldap (Ubuntu) Importance: Undecided Status: New ** Also affects: policykit-1 (Ubuntu) Importance: Undecided Status: New ** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openldap in Ubuntu. https://bugs.launchpad.net/bugs/1410195 Title: Able to bypass screen lock. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/light-locker/+bug/1410195/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1410195] Re: Able to bypass screen lock.
This issue is caused by Polkit not correctly working when box is installed as an LDAP client. ** Changed in: xubuntu-meta (Ubuntu) Status: Incomplete = Invalid ** Also affects: openldap (Ubuntu) Importance: Undecided Status: New ** Also affects: policykit-1 (Ubuntu) Importance: Undecided Status: New ** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1410195 Title: Able to bypass screen lock. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/light-locker/+bug/1410195/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
