able to view and change indicators without unlocking phone

Bug #1369453 reported by James Hunt
256
This bug affects 1 person
Affects Status Importance Assigned to Milestone
indicator-datetime (Ubuntu)
Confirmed
Critical
Unassigned
indicator-location (Ubuntu)
Confirmed
High
Unassigned
indicator-network (Ubuntu)
Confirmed
High
Antti Kaijanmäki

Bug Description

This is a pretty significant security issue that affects:

- networking - able to switch networks without entering pin to unlock phone
- GPS - can toggle.
- bluetooth - can toggle.
- upcoming events - can view.

Tags: avengers rtm14
Revision history for this message
James Hunt (jamesodhunt) wrote :

phablet@ubuntu-phablet:~$ cat /etc/ubuntu-build
40
phablet@ubuntu-phablet:~$ cat /etc/device-build
20140908-d8c11f3
phablet@ubuntu-phablet:~$

krillin.

information type: Public → Public Security
Changed in indicator-location (Ubuntu):
status: New → Confirmed
Changed in indicator-network (Ubuntu):
status: New → Confirmed
Changed in indicator-datetime (Ubuntu):
status: New → Confirmed
importance: Undecided → Critical
Changed in indicator-location (Ubuntu):
importance: Undecided → High
Changed in indicator-network (Ubuntu):
importance: Undecided → High
tags: added: rtm14
Changed in indicator-network (Ubuntu):
assignee: nobody → Antti Kaijanmäki (kaijanmaki)
Revision history for this message
Ted Gould (ted) wrote :

So by default we're allowing the indicators to be visible. There's settings in the system settings to hide the data that you don't want to go out into the greeter:

https://wiki.ubuntu.com/SecurityAndPrivacySettings#Phone

Not all the modes are implemented yet, so I'm going mark this a duplicate of the work there.

To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.