This bug was fixed in the package ubuntu-mate-meta - 1.282
---
ubuntu-mate-meta (1.282) jammy; urgency=medium
* Refreshed dependencies
* Removed gnome-system-tools from core-recommends, desktop-recommends
(LP: #1706770)
-- Martin Wimpress Sat, 09 Apr 2022 01:01:57 +0100
** Changed in: ubuntu-mate-meta (Ubuntu)
Status: In Progress => Fix Committed
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1706770
Title:
Lock screen can be
This issue is caused by the Users and Groups utility which is part of
`gnome-system-tools`. When changing the password from "Asked on logon"
to "Not asked on logon" the user is added to the `nopasswdlogin` group
and this is what causes the switch-user screen to not ask for a
password.
If you
** Also affects: gnome-system-tools (Ubuntu)
Importance: Undecided
Status: New
** Also affects: ubuntu-mate-meta (Ubuntu)
Importance: Undecided
Status: New
** Changed in: lightdm (Ubuntu)
Status: Fix Committed => Invalid
** Changed in: arctica-greeter (Ubuntu)
** Also affects: mate-screensaver (Ubuntu)
Importance: Undecided
Status: New
** Also affects: arctica-greeter (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to
** No longer affects: ubuntu-mate
** Changed in: mate-session-manager (Ubuntu)
Status: Confirmed => Invalid
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1706770
** Tags added: bionic focal
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1706770
Title:
Lock screen can be bypassed when auto-login is enabled.
Status in Ubuntu MATE:
#6 Chris quote:
4. Go to "System" -> "Administration" -> "Users and Groups".
5. Change password from "Asked on logon" to "Not asked on logon".
6. Lock your machine.
7. Press "Switch User".
8. Observe no password is required to unlock as the current user.
I confirm this issue on Ubuntu Mate
Dammit! I cant believe this level of lack of security could happen in
this project. WHAT A SHAME!
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1706770
Title:
Lock
** Tags added: xenial
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1706770
Title:
Lock screen can be bypassed when auto-login is enabled.
Status in Ubuntu MATE:
** Changed in: lightdm (Ubuntu)
Status: Confirmed => Fix Committed
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1706770
Title:
Lock screen can be bypassed when
** Information type changed from Private Security to Public Security
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1706770
Title:
Lock screen can be bypassed when
** Changed in: ubuntu-mate
Status: New => Confirmed
** Information type changed from Public Security to Private Security
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to lightdm in Ubuntu.
After a bit more investigation, being in the `nopasswdlogin` group is
what causes the switch-user screen to not ask for a password.
Having `autologin-user` set to your username in
/etc/lightdm/lightdm.conf is what works correctly.
--
You received this bug notification because you are a member
If it helps, I've reproduced this in a fresh Ubuntu Mate virtual
machine.
1. Install Ubuntu Mate following all the usual steps until you get to the
account creation screen.
2. Create a user account with a password and leave "require password at login"
checked.
3. Finish installation and reboot.
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: mate-session-manager (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to lightdm in Ubuntu.
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: lightdm (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to lightdm in Ubuntu.
Unable to reproduce this in Ubuntu MATE 17.04. I use full-disk
encryption too and enabled auto-login as well.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1706770
Title:
** Also affects: lightdm (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1706770
Title:
Lock screen can be bypassed
19 matches
Mail list logo