*** This bug is a security vulnerability *** Public security bug reported:
Users of which the home folder is encrypted using the CLI (unfortunately there is no GUI option for this, see https://bugs.launchpad.net/ubuntu/+source/gnome-control- center/+bug/1279766), and for which the 'login without password' is set, cannot login. Steps to reproduce: 1. Using an Administrator account, create a new user in System Settings > User Accounts and set a password. 2. Open a shell and encrypt the newly created user folder by 'sudo ecryptfs-migrate-home -u <username>' 3. Login into the new account: successful 4. Logout and login into the Administrator account and select 'Login without password' for the newly created user. 5. Login into the new account: cannot login (the password field for this users now displays 'Log in' but trying to login results in a flickering screen and back to the login screen. Ubuntu 14.04 x64 (reproducable on two different machines) ** Affects: gnome-control-center (Ubuntu) Importance: Undecided Status: New ** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-control-center in Ubuntu. https://bugs.launchpad.net/bugs/1318030 Title: Cannot login-without-password when home folder in encrypted Status in “gnome-control-center” package in Ubuntu: New Bug description: Users of which the home folder is encrypted using the CLI (unfortunately there is no GUI option for this, see https://bugs.launchpad.net/ubuntu/+source/gnome-control- center/+bug/1279766), and for which the 'login without password' is set, cannot login. Steps to reproduce: 1. Using an Administrator account, create a new user in System Settings > User Accounts and set a password. 2. Open a shell and encrypt the newly created user folder by 'sudo ecryptfs-migrate-home -u <username>' 3. Login into the new account: successful 4. Logout and login into the Administrator account and select 'Login without password' for the newly created user. 5. Login into the new account: cannot login (the password field for this users now displays 'Log in' but trying to login results in a flickering screen and back to the login screen. Ubuntu 14.04 x64 (reproducable on two different machines) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnome-control-center/+bug/1318030/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : [email protected] Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
