*** This bug is a security vulnerability ***

Public security bug reported:

Users of which the home folder is encrypted using the CLI (unfortunately
there is no GUI option for this, see
https://bugs.launchpad.net/ubuntu/+source/gnome-control-
center/+bug/1279766), and for which the 'login without password' is set,
cannot login.

Steps to reproduce:
1. Using an Administrator account, create a new user in System Settings > User 
Accounts and set a password.
2. Open a shell and encrypt the newly created user folder by 'sudo 
ecryptfs-migrate-home -u <username>'
3. Login into the new account: successful
4. Logout and login into the Administrator account and select 'Login without 
password' for the newly created user.
5. Login into the new account: cannot login (the password field for this users 
now displays 'Log in' but trying to login results in a flickering screen and 
back to the login screen.

Ubuntu 14.04 x64 (reproducable on two different machines)

** Affects: gnome-control-center (Ubuntu)
     Importance: Undecided
         Status: New

** Information type changed from Private Security to Public Security

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-control-center in Ubuntu.
https://bugs.launchpad.net/bugs/1318030

Title:
  Cannot login-without-password when home folder in encrypted

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-control-center/+bug/1318030/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

Reply via email to