*** This bug is a security vulnerability ***

Private security bug reported:

Ubuntu 16.04.2 LTS using Unity
unity-greeter 16.04.2-0ubuntu1

On a HiDPI monitor on a Dell XPS 13 9343 laptop, if you uncheck
com.canonical.unity-greeter -> draw-user-backgrounds and then lock the
desktop:

Expected: the purple placeholder wallpaper should cover the entire desktop
Observed: the purple placeholder wallpaper only covers the top-left part of the 
desktop

I'm attaching an image showing roughly what the desktop looks like when
it's locked. The green rectangle is the part covered by the purple
wallpaper, the red is stuff that should not be visible when locked, and
the yellow is the usual name/password entry box that is partially
transparent.

I'm marking this bug as a security vulnerability because it allows
someone to see part of a user's desktop even when the desktop is locked.

** Affects: unity-greeter (Ubuntu)
     Importance: Undecided
         Status: New

** Attachment added: "Image showing roughly what the desktop looks like when 
it's locked"
   
https://bugs.launchpad.net/bugs/1666359/+attachment/4823030/+files/lock_screen_bug.jpg

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1666359

Title:
  Lock screen doesn't cover entire desktop on HiDPI display with draw-
  user-backgrounds unchecked

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/unity-greeter/+bug/1666359/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to