This bug was fixed in the package ubuntu-mate-meta - 1.282
---
ubuntu-mate-meta (1.282) jammy; urgency=medium
* Refreshed dependencies
* Removed gnome-system-tools from core-recommends, desktop-recommends
(LP: #1706770)
-- Martin Wimpress Sat, 09 Apr 2022 01:01:57 +0100
** Changed in: ubuntu-mate-meta (Ubuntu)
Status: In Progress => Fix Committed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1706770
Title:
Lock screen can be bypassed when auto-login is
This issue is caused by the Users and Groups utility which is part of
`gnome-system-tools`. When changing the password from "Asked on logon"
to "Not asked on logon" the user is added to the `nopasswdlogin` group
and this is what causes the switch-user screen to not ask for a
password.
If you
** Also affects: gnome-system-tools (Ubuntu)
Importance: Undecided
Status: New
** Also affects: ubuntu-mate-meta (Ubuntu)
Importance: Undecided
Status: New
** Changed in: lightdm (Ubuntu)
Status: Fix Committed => Invalid
** Changed in: arctica-greeter (Ubuntu)
** Also affects: mate-screensaver (Ubuntu)
Importance: Undecided
Status: New
** Also affects: arctica-greeter (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
** No longer affects: ubuntu-mate
** Changed in: mate-session-manager (Ubuntu)
Status: Confirmed => Invalid
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1706770
Title:
Lock screen can be
** Tags added: bionic focal
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1706770
Title:
Lock screen can be bypassed when auto-login is enabled.
To manage notifications about this bug go to:
#6 Chris quote:
4. Go to "System" -> "Administration" -> "Users and Groups".
5. Change password from "Asked on logon" to "Not asked on logon".
6. Lock your machine.
7. Press "Switch User".
8. Observe no password is required to unlock as the current user.
I confirm this issue on Ubuntu Mate
Dammit! I cant believe this level of lack of security could happen in
this project. WHAT A SHAME!
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1706770
Title:
Lock screen can be bypassed when
** Tags added: xenial
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1706770
Title:
Lock screen can be bypassed when auto-login is enabled.
To manage notifications about this bug go to:
** Changed in: lightdm (Ubuntu)
Status: Confirmed => Fix Committed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1706770
Title:
Lock screen can be bypassed when auto-login is enabled.
To
** Information type changed from Private Security to Public Security
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1706770
Title:
Lock screen can be bypassed when auto-login is enabled.
To manage
** Changed in: ubuntu-mate
Status: New => Confirmed
** Information type changed from Public Security to Private Security
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1706770
Title:
Lock
After a bit more investigation, being in the `nopasswdlogin` group is
what causes the switch-user screen to not ask for a password.
Having `autologin-user` set to your username in
/etc/lightdm/lightdm.conf is what works correctly.
--
You received this bug notification because you are a member
If it helps, I've reproduced this in a fresh Ubuntu Mate virtual
machine.
1. Install Ubuntu Mate following all the usual steps until you get to the
account creation screen.
2. Create a user account with a password and leave "require password at login"
checked.
3. Finish installation and reboot.
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: lightdm (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1706770
Title:
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: mate-session-manager (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
Unable to reproduce this in Ubuntu MATE 17.04. I use full-disk
encryption too and enabled auto-login as well.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1706770
Title:
Lock screen can be
** Also affects: lightdm (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1706770
Title:
Lock screen can be bypassed when auto-login is enabled.
** Information type changed from Private Security to Public Security
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1706770
Title:
Lock screen can be bypassed when auto-login is enabled.
To manage
20 matches
Mail list logo
