Public bug reported:
Binary package hint: vino
If the "Lock screen on disconnect" feature is enabled, the screen will
indeed be disconnected when someone disconnects from the VNC server.
However, it appears to function simply by locking the screen whenever
*any* connection to the VNC server terminates.
That is to say, you can telnet to port 5900 on your machine, disconnect
and the screen will lock. You can nmap your machine and the screen will
lock, or you can connect with a legitimate VNC client, but fail to get
the password right or be denied access by vino's "Ask for confirmation"
option, and your screen will lock.
If you enable this feature, anyone with network access to your machine
can DoS you by locking your screen at will. This seems somewhat
unhelpful. The screen should only lock after a *successful* connection.
** Affects: vino (Ubuntu)
Importance: Undecided
Status: New
--
[hardy] "Lock screen on disconnect" overzealous
https://bugs.launchpad.net/bugs/201465
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
