Re: [Bug 49579] Re: screen doesn't lock when some menu is open

2013-11-05 Thread Keller-scholl
That entirely depends on how much your prioritize security over usefulness.
I would not want that to happen, because I don't have secure things, by and
large. I can completely understand other people disagreeing. Ubuntu isn't
about prioritizing security over all else, I feel. A shutdown is excessive
to avoid people seeing the screen for a few seconds.


On Tue, Nov 5, 2013 at 9:36 AM, Obadz 49...@bugs.launchpad.net wrote:

  Killing just the X session (client) holding the lock is unacceptable
 because killing a user's apps or shell is worse than the bug itself.

 I wholeheartedly disagree. shutdown the computer altogether would be
 less bad than granting access when the user expects otherwise..

 --
 You received this bug notification because you are subscribed to a
 duplicate bug report (1215976).
 https://bugs.launchpad.net/bugs/49579

 Title:
   screen doesn't lock when some menu is open

 Status in GNOME Screensaver:
   Confirmed
 Status in OEM Priority Project:
   Won't Fix
 Status in OEM Priority Project precise series:
   Won't Fix
 Status in X.Org X server:
   Confirmed
 Status in “gnome-screensaver” package in Ubuntu:
   Triaged
 Status in “gnome-screensaver” source package in Precise:
   Confirmed
 Status in “xorg-server” package in Debian:
   Confirmed

 Bug description:
   Binary package hint: gnome-screensaver

   I'm running a fresh install of Dapper with screensaver set to 'blank
   screen', and 'lock screen when screensaver is active' enabled.

   If a panel menu (e.g. Applications) is open and the machine is left
   idle, the screen fails to lock. It fades out after the time period as
   expected, but the desktop reappears after a few seconds.

   Ben (comments / criticism welcome, this is my first bug report)

 To manage notifications about this bug go to:
 https://bugs.launchpad.net/gnome-screensaver/+bug/49579/+subscriptions


-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/49579

Title:
  screen doesn't lock when some menu is open

To manage notifications about this bug go to:
https://bugs.launchpad.net/gnome-screensaver/+bug/49579/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1215976] [NEW] Plugging in HDMI during login temporarily revealed screen

2013-08-23 Thread Keller-scholl
*** This bug is a security vulnerability ***

Public security bug reported:

I had left my computer to get water, and when I returned it had gone
black, as it normally does. I tapped at the keys, used my mousepad, the
normal to get it awake again. At some point, I plugged in an HDMI cable
connected to a Dell moniter that I have connected to this computer
before. I am not sure if the screen was black, or at the login screen,
when I did this. I began typing in my password. As I did so, the
connection to the monitor, which had been black, seemed to activate, and
I saw the login screen on the larger monitor. However, I also saw the
pages that I had open on my laptop screen. This was before login was
complete.

I am aware that this probably doesn't represent a serious security risk,
but it is problematic and potentially damaging.

I have no evidence that the fault is xorgs, but I was told to put all vision 
problems
under the xorg package. 

ProblemType: Bug
DistroRelease: Ubuntu 13.04
Package: xorg 1:7.7+1ubuntu4
Uname: Linux 3.4.0 i686
.tmp.unity.support.test.0:

ApportVersion: 2.9.2-0ubuntu8.3
Architecture: i386
BootLog:

CompizPlugins: No value set for 
`/apps/compiz-1/general/screen0/options/active_plugins'
CompositorRunning: compiz
CompositorUnredirectDriverBlacklist: '(nouveau|Intel).*Mesa 8.0'
CompositorUnredirectFSW: true
Date: Fri Aug 23 10:44:18 2013
DistUpgraded: Fresh install
DistroCodename: raring
DistroVariant: ubuntu
ExtraDebuggingInterest: Yes, if not too technical
GraphicsCard:
 Intel Corporation 2nd Generation Core Processor Family Integrated Graphics 
Controller [8086:0106] (rev 09) (prog-if 00 [VGA controller])
   Subsystem: Intel Corporation 2nd Generation Core Processor Family Integrated 
Graphics Controller [8086:0106]
MachineType: GOOGLE Parrot
MarkForUpload: True
ProcEnviron:
 TERM=xterm
 PATH=(custom, no username)
 XDG_RUNTIME_DIR=set
 SHELL=/bin/sh
ProcKernelCmdLine: cros_secure  console=tty1 debug verbose root=/dev/sda7 
rootwait rw lsm.module_locking=0
SourcePackage: xorg
Symptom: display
UpgradeStatus: No upgrade log present (probably fresh install)
dmi.bios.date: 09/10/2012
dmi.bios.vendor: coreboot
dmi.bios.version: Google_Parrot.2685.37.0
dmi.chassis.type: 3
dmi.chassis.vendor: GOOGLE
dmi.modalias: 
dmi:bvncoreboot:bvrGoogle_Parrot.2685.37.0:bd09/10/2012:svnGOOGLE:pnParrot:pvr1.0:cvnGOOGLE:ct3:cvr:
dmi.product.name: Parrot
dmi.product.version: 1.0
dmi.sys.vendor: GOOGLE
version.compiz: compiz 1:0.9.9~daily13.06.19~13.04-0ubuntu1
version.libdrm2: libdrm2 2.4.43-0ubuntu1.1
version.libgl1-mesa-dri: libgl1-mesa-dri 9.1.3-0ubuntu0.3
version.libgl1-mesa-dri-experimental: libgl1-mesa-dri-experimental N/A
version.libgl1-mesa-glx: libgl1-mesa-glx 9.1.3-0ubuntu0.3
version.xserver-xorg-core: xserver-xorg-core 2:1.13.3-0ubuntu6
version.xserver-xorg-input-evdev: xserver-xorg-input-evdev 1:2.7.3-0ubuntu2b2
version.xserver-xorg-video-ati: xserver-xorg-video-ati 1:7.1.0-0ubuntu2
version.xserver-xorg-video-intel: xserver-xorg-video-intel 2:2.21.6-0ubuntu4.1
version.xserver-xorg-video-nouveau: xserver-xorg-video-nouveau 1:1.0.7-0ubuntu1
xserver.bootTime: Thu Aug 22 22:24:15 2013
xserver.configfile: default
xserver.errors:

xserver.logfile: /var/log/Xorg.0.log
xserver.version: 2:1.13.3-0ubuntu6
xserver.video_driver: intel

** Affects: xorg (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: apport-bug compiz-0.9 i386 raring ubuntu

** Information type changed from Private Security to Public Security

** Description changed:

  I had left my computer to get water, and when I returned it had gone
  black, as it normally does. I tapped at the keys, used my mousepad, the
  normal to get it awake again. At some point, I plugged in an HDMI cable
  connected to a Dell moniter that I have connected to this computer
  before. I am not sure if the screen was black, or at the login screen,
  when I did this. I began typing in my password. As I did so, the
  connection to the monitor, which had been black, seemed to activate, and
  I saw the login screen on the larger monitor. However, I also saw the
  pages that I had open on my laptop screen. This was before login was
  complete.
  
  I am aware that this probably doesn't represent a serious security risk,
  but it is problematic and potentially damaging.
  
+ I have no evidence that the fault is xorgs, but I was told to put all vision 
problems
+ under the xorg package. 
+ 
  ProblemType: Bug
  DistroRelease: Ubuntu 13.04
  Package: xorg 1:7.7+1ubuntu4
  Uname: Linux 3.4.0 i686
  .tmp.unity.support.test.0:
-  
+ 
  ApportVersion: 2.9.2-0ubuntu8.3
  Architecture: i386
  BootLog:
-  
+ 
  CompizPlugins: No value set for 
`/apps/compiz-1/general/screen0/options/active_plugins'
  CompositorRunning: compiz
  CompositorUnredirectDriverBlacklist: '(nouveau|Intel).*Mesa 8.0'
  CompositorUnredirectFSW: true
  Date: Fri Aug 23 10:44:18 2013
  DistUpgraded: Fresh install
  DistroCodename: raring
  DistroVariant: ubuntu
  ExtraDebuggingInterest: Yes,