Please reply if this is still an issue on a supported release.
** Changed in: pm-utils (Ubuntu)
Status: New => Invalid
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to pm-utils in Ubuntu.
https://bugs.launchpad.net/bugs/606301
Title:
can use the desktop some seconds before login
Status in “pm-utils” package in Ubuntu:
Invalid
Bug description:
Hi
I usually suspend my desktop session by closing the lit of my laptop
without logout. When I open it again ubuntu go back from sleep and ask
me my password I recover my desktop.
What happen :
I can sometimes see my desktop a few (milli)seconds before the system ask me
my password.
I thought it was only a quick display but the last time I didn't pay
attention and started using that desktop and it asked me for the password only
a few seconds after. I had been able to quickly launch a search on firefox
(firefox was already open on my session) before login. I didn't had time to see
the result of my search but after login I saw that the request was sent and saw
the result.
What should happen :
Going back from sleep I should not see the previous user's desktop before and
in no way I should be able to *use* his session before login. Ubuntu/Gnome/X11
should ask for login immediatly and not with some latency.
Why this is a problem :
If i leave a program opened, one could see my mails or my current private
work. If the wake up is slow like last time, it could even delete my mails or
do something on my behalf.
I am hesitating if I should flag it as a security vulnerability. I did not
because it is only local and may be very difficult to exploit. However it is
probably a serious privacy problem.
Config :
I am using the last stable (ubuntu 10.4) with up to date security fixes, and
a standard gnome desktop. Not sure if it has any consequences but we are often
two users loggued in with this laptop, using the fast user switching applet.
I don't know which package is responsible for all this stuff but if you name
me something I will give you any version/configuration details you may find
usefull.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/pm-utils/+bug/606301/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
