rebooting defeats the screen lock timeout
Bug #1383086 reported by
James Hunt
This bug affects 3 people
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
unity8 (Ubuntu) |
Fix Released
|
Medium
|
Michael Terry |
Bug Description
If you enable pin unlock, then repeatedly enter the incorrect pin, eventually you'll get a message stating that the phone cannot be unlocked for 5 minutes. However, this restriction can be trivially bypassed by simply rebooting the phone (which takes less than 5 minutes :-)
krillin, r117.
Related branches
lp:~mterry/unity8/locked-out-over-reboot
- Albert Astals Cid (community): Approve
- PS Jenkins bot (community): Needs Fixing (continuous-integration)
-
Diff: 293 lines (+125/-11)5 files modifieddata/com.canonical.Unity8.gschema.xml (+8/-0)
qml/Greeter/Greeter.qml (+47/-8)
tests/mocks/GSettings.1.0/fake_gsettings.cpp (+31/-0)
tests/mocks/GSettings.1.0/fake_gsettings.h (+9/-0)
tests/qmltests/Greeter/tst_Greeter.qml (+30/-3)
information type: | Public → Public Security |
Changed in unity8 (Ubuntu): | |
assignee: | nobody → Michael Terry (mterry) |
Changed in unity8 (Ubuntu): | |
status: | Incomplete → Triaged |
importance: | Undecided → Medium |
assignee: | nobody → Michael Terry (mterry) |
Changed in unity8 (Ubuntu): | |
assignee: | Michael Terry (mterry) → nobody |
Changed in unity8 (Ubuntu): | |
assignee: | nobody → Michael Terry (mterry) |
status: | Triaged → In Progress |
To post a comment you must log in.
I think this was discussed and ACKed by security, the time needed to reboot is enough to prevent any real bruteforcing of the password.