*** This bug is a duplicate of bug 1806961 ***
    https://bugs.launchpad.net/bugs/1806961

** This bug has been marked a duplicate of bug 1806961
   Lock can be circumvented by switching tty when using lightdm

** Information type changed from Private Security to Public Security

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1824817

Title:
  Security breach with CRTL+ALT+F7

Status in lightdm package in Ubuntu:
  New

Bug description:
  This problem concerns every versions of Ubuntu 18 (Desktop or LTS) :

  When I lock my session with the padlock icon, I can open it with
  CRTL+ALT+F7 without password.

  This is the step to reproduce the problem:

  - Install Ubuntu 18 (Desktop or LTS) with the default option.
  The default windows manager is gnome

  - Install lightdm => the opening window logging will be replaced by
  the opening window logging of lightdm

  - Open a session

  - Lock the session with the padlock icon (in the right upper corner,
  click on the down arrow and click on the padlock icon)

  - The session seems lock because you can see the opening window
  logging wich asks you the password but press on CRTL+ALT+F7 and you
  can open the session without password.

  ProblemType: Bug
  DistroRelease: Ubuntu 18.10
  Package: lightdm 1.28.0-0ubuntu1
  ProcVersionSignature: Ubuntu 4.18.0-10.11-generic 4.18.12
  Uname: Linux 4.18.0-10-generic x86_64
  ApportVersion: 2.20.10-0ubuntu13
  Architecture: amd64
  CurrentDesktop: ubuntu:GNOME
  Date: Mon Apr 15 15:26:04 2019
  InstallationDate: Installed on 2019-04-11 (4 days ago)
  InstallationMedia: Ubuntu 18.10 "Cosmic Cuttlefish" - Release amd64 
(20181017.3)
  SourcePackage: lightdm
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lightdm/+bug/1824817/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to