alt+f7 gain full access to a password protected account

Bug #881147 reported by Goldy
258
This bug affects 1 person
Affects Status Importance Assigned to Milestone
gnome-screensaver (Ubuntu)
Expired
Medium
Unassigned

Bug Description

On ubuntu 10.04, I choose System > Disconnect > Swich User,
then at the login screen I click Ctrl+Alt+F4 to get a command line over a black screen. the problem: clicking Alt+F7 redirect back to my password 'protected' desktop WITHOUT entering password!

How is it possible and how can I fix it?

Description: Ubuntu 10.04.3 LTS
Release: 10.04

apt-cache policy login
login:
  Installed: 1:4.1.4.2-1ubuntu2
  Candidate: 1:4.1.4.2-1ubuntu2.2

I expect to go back to the login screen, NOT skipping the password. the whole idea of a password is to protect the data...

p.s
I can't use "lock screen" because it aventualy freeze my desktop, & the only release is the "reset" button.

Goldy (sutrdudk)
visibility: private → public
Revision history for this message
Marc Deslauriers (mdeslaur) wrote :

Did you disable gnome-screensaver in any way, including disabling the lock screen functionality?

affects: shadow (Ubuntu) → gnome-screensaver (Ubuntu)
Changed in gnome-screensaver (Ubuntu):
status: New → Incomplete
Revision history for this message
Goldy (sutrdudk) wrote :

I REinstalled the "lock screen" package.
now I choose "system > lock screen" to get the screensaver (real lock), then in order to prevent freezing I click ctrl+alt+f4 to get the command line.

unfortunately choosing "system > logout > switch user" will STILL show my 'protected' desktop to less then a second before demanding a password, & if stay on the screensaver will freez my desktop!

Changed in gnome-screensaver (Ubuntu):
importance: Undecided → Medium
Revision history for this message
Launchpad Janitor (janitor) wrote :

[Expired for gnome-screensaver (Ubuntu) because there has been no activity for 60 days.]

Changed in gnome-screensaver (Ubuntu):
status: Incomplete → Expired
Revision history for this message
Goldy (sutrdudk) wrote :

Y is this "medium" project is still 'unassigen'?

To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.