This bug was fixed in the package lightdm - 1.19.5-0ubuntu1
---
lightdm (1.19.5-0ubuntu1) yakkety; urgency=medium
* New upstream release:
- Fix errors in documentation generation
- Improve documentation
- Fix guest AppArmor profile to allow guest sessions more access to
Uploaded an updated version to Yakkety (1.19.5-0ubuntu1)
** Changed in: lightdm (Ubuntu)
Status: Triaged => Fix Committed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1627304
Title:
User
** No longer affects: gnome-session (Ubuntu)
** No longer affects: lightdm-gtk-greeter (Ubuntu)
** No longer affects: unity-greeter (Ubuntu)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1627304
Assigning the lightdm task to Robert for now since he's already fixed it
upstream.
** Changed in: lightdm (Ubuntu)
Assignee: Ubuntu Security Team (ubuntu-security) => Robert Ancell
(robert-ancell)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is
@robert-ancell I tested your proposed change to the lightdm AppArmor
abstraction and can confirm that it allows the guest session to start
for me. Thanks for looking into the denials and getting that fixed!
I see that you committed the fix upstream. Do you plan on making another
lightdm upload
** No longer affects: xubuntu-default-settings (Ubuntu)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1627304
Title:
User locking problems - guest login crashing
To manage notifications about this
@robert-ancell - reverted (Xubuntu) to our old default settings, undid
this change and everything works as before.
Change to xubuntu-default-settings was something pitti appears to have
done
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to
@robert-ancell - tested that on Xubuntu (bug 1627310) works fine there
using something other than light-locker (we have a seperate issue there
bug 1622303)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
Note you can test changes like this by running:
$ sudoedit /etc/apparmor.d/abstractions/lightdm
$ sudo systemctl reload apparmor.service
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1627304
Title:
** Branch linked: lp:lightdm
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1627304
Title:
User locking problems - guest login crashing
To manage notifications about this bug go to:
The following fix to the abstraction seems to fix the issue:
=== modified file 'data/apparmor/abstractions/lightdm'
--- data/apparmor/abstractions/lightdm 2015-10-19 10:44:23 +
+++ data/apparmor/abstractions/lightdm 2016-09-28 03:39:54 +
@@ -95,7 +95,7 @@
unix (receive)
Marking the apparmor task as invalid since the changes will likely need
to be made to the profile shipped by lightdm.
** Changed in: apparmor (Ubuntu)
Status: Incomplete => Invalid
** Changed in: lightdm (Ubuntu)
Assignee: (unassigned) => Ubuntu Security Team (ubuntu-security)
--
Thanks, I gave it a shot (after putting the profile into complain mode)
and here are the unique denials that I see when starting the guest
session:
operation="mknod" profile="/usr/lib/lightdm/lightdm-guest-session"
name="/proc/1295/fd/2" pid=1295 comm="lightdm-session" requested_mask="c"
Sep 23 21:42:38 wolf-wolf kernel: [ 69.411731] audit: type=1400
audit(1474663358.636:31): apparmor="DENIED" operation="connect"
profile="/usr/lib/lightdm/lightdm-guest-session" pid=3713 comm="initctl"
family="unix" sock_type="stream" protocol=0 requested_mask="send receive
accept"
Hi - are there any AppArmor denials in the syslog? To check, you can
trigger this bug and then look in /var/log/syslog for lines that contain
'apparmor="DENIED"'. Thanks!
** Changed in: apparmor (Ubuntu)
Importance: Critical => Undecided
** Changed in: apparmor (Ubuntu)
Status:
(The security team will look soon)
** Changed in: lightdm-gtk-greeter (Ubuntu)
Status: Confirmed => Incomplete
** Changed in: xubuntu-default-settings (Ubuntu)
Status: Confirmed => Incomplete
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is
I think this is an issue with the lightdm(-guest-session) apparmor
profiles.
In dmesg:
laney@yakkety-vm:~$ dmesg | grep DENIED
[ 142.273990] audit: type=1400 audit(1474905574.718:125): apparmor="DENIED"
operation="open" profile="/usr/lib/lightdm/lightdm-guest-session"
Tested with Ubuntu MATE, and the guest session works fine there, so the
issue is probably not caused by lightdm.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1627304
Title:
User locking problems -
>From Xubuntu, see same symptoms as seen previously - that is, can log in
to Guest - logout fails.
Dialogue looks ok for us.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1627304
Title:
User
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: gnome-session (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1627304
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: xubuntu-default-settings (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
I could reproduce the issue on Ubuntu 16.10. Additional observations:
* Logging in to a guest session fails also when you do it from the
login screen without being logged in as a regular user, so I doubt
that the issue is related to screen locking.
* The zenity warning dialog shows up, but
In Xubuntu we can login to the gues user desktop - but it crashes on
logout rather than logging in.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1627304
Title:
User locking problems - guest login
** Also affects: gnome-session (Ubuntu)
Importance: Undecided
Status: New
** Also affects: xubuntu-default-settings (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: unity-greeter (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1627304
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: lightdm-gtk-greeter (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1627304
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: lightdm (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1627304
Title:
A similar issue exists in Xubuntu.
Default xubuntu install however does not allow to resume a locked
session at all.
We've experimented with changing locker from light-locker to gnome-
screensaver and xscreensaver - when using gnome-screensaver we see the
same as with the Ubuntu issue.
bug
28 matches
Mail list logo