lp:lightdm/1.18

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #960157: lightdm exits on SIGHUP	Medium	Fix Committed
Bug #1539445: PAM User info messages do not localized	Undecided	New
Bug #1578442: XDMCP Willing/Unwilling messages do not report hostname	Medium	Fix Committed
Bug #1579867: lightdm set SIGPIPE disposition to SIG_IGN even for children	Medium	Fix Committed
Bug #1631707: Missing suspend and hibernate functionality for non-systemd systems with upower 0.99.0 =>	High	Fix Committed
Bug #1648637: handle interruped read and write calls	High	Fix Committed
Bug #1656399: Returning to existing session is unreliable and can leave on blank screen	High	Fix Committed
Bug #1707187: Export autologin-session to greeter	Wishlist	Fix Committed
Bug #1718565: Timed autologin doesn't use autologin-session	Medium	Fix Committed

Link a bug report

Related blueprints

2355. By Robert Ancell on 2017-09-21

Fix timed autologins not using autologin-session when no session specified

2354. By Robert Ancell on 2017-09-21

Expose autologin-session as a hint to the greeter

Based on a patch by Roland Tapken.

2353. By Robert Ancell on 2017-04-04

Update debian/changelog

2352. By Tyler Hicks on 2017-04-04

Detect existing malicious guest user home dirs

It was discovered that a local attacker could watch for lightdm's
guest-account script to create a /tmp/guest-XXXXXX file and then quickly
create the lowercase representation of the guest user's home directory
before lightdm could. This allowed the attacker to have control of the
guest user's home directory and, subsequently, gain control of an
arbitrary directory in the filesystem which could lead to privilege
escalation.

This patch fixes the issue by detecting failures in creating a directory
for the guest user's home directory. If the file (directory, symlink,
etc.) already exists at the path, mkdir will fail and the script will
exit. This means that it is still possible for a local user to carry out
a denial of service on the guest user login feature.

2351. By Robert Ancell on 2017-02-21

Fix logic that checked if a session was being stopped

2350. By Robert Ancell on 2017-01-12

Use power management functions from ConsoleKit2 if available.

Suspend and hibernate functionality was removed from upower 0.99.0, so systems
not using systemd had now suspend/hibernate functionality. Support for this
was added into ConsoleKit2.

Most systems will either be systemd or ConsoleKit2 now, so we try the following:
1. Power management in logind
2. Power management in ConsoleKit
3. upower for suspend/resume (really only here to not break backwards
   compatibility)

Based on a patch for Gentoo by Fitzcarraldo.

2349. By Robert Ancell on 2017-01-12

Use liblightdm-gobject power methods instead of re-implementing in Qt, only run power fallback tests once

2348. By Robert Ancell on 2016-12-09

Fix incorrect unref in XDMCP code

2347. By Robert Ancell on 2016-12-08

Use SA_RESTART on signals so we don't get interrupted reads

2346. By Robert Ancell on 2016-10-20

Re-enable SIGPIPE for children so they have default behaviour