*** This bug is a security vulnerability ***

Public security bug reported:

Binary package hint: gdm-guest-session

Say I want to let a friend use my PC, but for whatever reason don't want
them dicking around in my personal account.  Fair enough, I launch the
guest account.  The fact that a Guest account exists suggests that it is
a separate account and is not intended to allow access to my personal
information.

I hand the PC to my friend and they click the user-switcher and choose my name. 
 My desktop loads for them without so much as a screensaver password.  This 
seems contrary to the purpose of a separate account.
gdm-guest-session: 0.8
latest Jaunty Alpha

** Affects: gdm-guest-session (Ubuntu)
     Importance: Undecided
         Status: New

** Visibility changed to: Public

** Summary changed:

- Guest account provides full access to privilaged account
+ Guest account provides full access to privileged account

-- 
Guest account provides full access to privileged account
https://bugs.launchpad.net/bugs/343485
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to