GDM 3 disable-user-list=true does not work with gnome-shell greeter
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
gdm |
Fix Released
|
Medium
|
|||
gnome-shell (Ubuntu) |
Fix Released
|
Low
|
Unassigned | ||
Quantal |
Fix Released
|
Low
|
Jeremy Bícha |
Bug Description
[Impact]
It's not possible to hide the list of users on the gdm lock screen. This is considered a security vulnerability in some environments.
[Test Case]
* Install gnome-shell and set gdm as your default display manager. Reboot (or kill lightdm and start gdm)
* If you have ubuntu-
disable-
as a new line at the bottom of /usr/share/
Otherwise, create a new file named /usr/share/
[org.gnome.
disable-
* sudo service gdm restart
* The userlist should not show up on the login screen.
[Regression Potential]
Minimal. This fix is included in the gnome-shell 3.6.2 update (bug 1078155)
Original bug report
===================
when you edit /etc/gdm/
when you run "sudo gsettings set org.gnome.
The only way I have been able to get a user to not show up in the user list has been to set the uid < 1000. This is a horrible hack and not viable.
lsb_release -rd
Description: Ubuntu 12.10
Release: 12.10
gdm:
Installed: 3.6.1-0ubuntu1
Candidate: 3.6.1-0ubuntu1
Version table:
*** 3.6.1-0ubuntu1 0
500 http://
100 /var/lib/
description: | updated |
Changed in gdm: | |
importance: | Unknown → Medium |
status: | Unknown → New |
Changed in gdm: | |
status: | New → Fix Released |
affects: | gdm (Ubuntu) → gnome-shell (Ubuntu) |
Changed in gnome-shell (Ubuntu): | |
importance: | Undecided → Low |
status: | Confirmed → Triaged |
Changed in gnome-shell (Ubuntu Quantal): | |
status: | New → Triaged |
importance: | Undecided → Low |
description: | updated |
Changed in gnome-shell (Ubuntu Quantal): | |
status: | Triaged → In Progress |
assignee: | nobody → Jeremy Bicha (jbicha) |
greeter.gsettings is a file that was added by the debian package, however the relevant patch to support this file is no longer available. Really we should remove this file from /etc since being there implies that it should work. Either we could move it the schema folder or the docs folder I suppose.
Additionally I believe that the gnome-shell greeter does not support most of the overrides in greeter.gsettings, you need to use gdm fallback if you want those options.