*** This bug is a security vulnerability ***

You have been subscribed to a public security bug:

Having set a root password and enabled local root login in System ->
Administration -> Login Window, then while already logged in as my
normal user I locked the screen then clicked the "Switch User" button
and logged in as root. Switching back to my normal user requires me to
enter a password however switching from my normal user to root it
doesn't require a password.

Surely a user switch to the superuser should require a password?

% lsb_release -rd
Description:    Ubuntu 8.10
Release:        8.10

% uname -a
Linux sprite 2.6.27-7-generic #1 SMP Tue Nov 4 19:33:06 UTC 2008 x86_64 
GNU/Linux

** Affects: gnome-screensaver (Ubuntu)
     Importance: Undecided
         Status: Incomplete

-- 
User switch to root doesn't ask for password
https://bugs.edge.launchpad.net/bugs/347865
You received this bug notification because you are a member of Ubuntu Desktop 
Bugs, which is subscribed to gnome-screensaver in ubuntu.

-- 
desktop-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

Reply via email to