expo allows bypass of screensaver
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
compiz-fusion-plugins-main (Ubuntu) |
Fix Released
|
High
|
Michael Vogt | ||
Gutsy |
Fix Released
|
Undecided
|
Unassigned | ||
Hardy |
Fix Released
|
High
|
Michael Vogt | ||
Intrepid |
Fix Released
|
High
|
Michael Vogt | ||
Jaunty |
Fix Released
|
High
|
Michael Vogt |
Bug Description
Binary package hint: compiz-
Reported upstream as https:/
when the screensaver is active, expo mouse button shortcuts are still active. entering expo mode while the screensaver is up allows the user to click and drag the screensaver window and move it aside. the computer then becomes usable from behind the screensaver window, thereby making the "lock" feature of the screensaver quite useless.
this is using 8.10 with compiz-
TEST CASE:
0. install compiz and compiz-
1. run "ccsm" and go to the "expo" tab, then bind a mouse button to expo (e.g. <Shift>Button1)
2. lock screen
3. activate expo with the mouse button (shift-button1)
4. drag screensaver aside
5. steal coworker's private data
6. install update from -proposed
7. logout/login
8. repeat steps 2-4
9. verify that the window can no longer be dragged aside
Related branches
description: | updated |
description: | updated |
description: | updated |
Changed in compiz-fusion-plugins-main: | |
assignee: | nobody → mvo |
status: | Confirmed → Fix Committed |
assignee: | nobody → mvo |
status: | New → In Progress |
assignee: | nobody → mvo |
status: | New → In Progress |
Changed in compiz-fusion-plugins-main: | |
importance: | Undecided → High |
importance: | Undecided → High |
Urgh. Not again.
I'm not sure whether the problem here is with gnome-screensaver failing to grab the mouse, or what, but this is a serious problem.