No password prompt before resetting the device

Bug #1388942 reported by Omer Akram
264
This bug affects 3 people
Affects Status Importance Assigned to Milestone
Ubuntu UX
Fix Committed
Undecided
Unassigned
ubuntu-system-settings (Ubuntu)
Triaged
High
Unassigned

Bug Description

I can reset my device just by going to settings and going to reset panel.

The problem is it does not ask for any security key. My case is: someone asks my phone to make a call, they end the call and reset the phone, just like that.

<https://wiki.ubuntu.com/SystemSettings#phone-reset>: "If you use any phone locking scheme, choosing “Reset All System Settings” or “Erase & Reset Everything” in the alert should prompt you to unlock before displaying the alert..."

ProblemType: Bug
DistroRelease: Ubuntu 14.10
Package: ubuntu-system-settings 0.3+14.10.20141022-0ubuntu1
ProcVersionSignature: Ubuntu 3.16.0-24.32-generic 3.16.4
Uname: Linux 3.16.0-24-generic x86_64
ApportVersion: 2.14.7-0ubuntu8
Architecture: amd64
CurrentDesktop: Unity
Date: Mon Nov 3 23:37:18 2014
InstallationDate: Installed on 2014-06-14 (141 days ago)
InstallationMedia: Ubuntu 14.10 "Utopic Unicorn" - Alpha amd64 (20140610.1)
SourcePackage: ubuntu-system-settings
UpgradeStatus: No upgrade log present (probably fresh install)

Revision history for this message
Omer Akram (om26er) wrote :
Revision history for this message
Sebastien Bacher (seb128) wrote :

That needs design input, if you hand up an unlocked device to somebody you don't trust you can expect issues (same way that if you give an unlock laptop to somebody)

Changed in ubuntu-system-settings (Ubuntu):
importance: Undecided → Low
Revision history for this message
Omer Akram (om26er) wrote :

There are a hundred other scenarios where trust is not the problem but your phone still gets fiddled. But that's not the point of discussion. The factory reset is a serious thing.

Revision history for this message
Matthew Paul Thomas (mpt) wrote :

This is already in the spec.

no longer affects: ubuntu-ux
description: updated
Changed in ubuntu-system-settings (Ubuntu):
importance: Low → High
status: New → Confirmed
Changed in ubuntu-ux:
status: New → Fix Committed
information type: Public → Public Security
Changed in ubuntu-system-settings (Ubuntu):
status: Confirmed → Triaged
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.