local security 7.10 (change session ctrl+alt+f7 return session with no password)

Bug #162076 reported by ikerc on 2007-11-11
256
Affects Status Importance Assigned to Milestone
Ubuntu
Undecided
Unassigned

Bug Description

when you change your session to return on the window connection you can enter ctrl+alt+f7 to return in your session but no password is needing to that !!

lorsque tu quitte ton bureau pour retourner a la fenetre des connexion, en tapant ctrl+alt+f7 ubuntu ne te demmande pas ton mot de passe pour re-entrer dans ta session !

my laptop is an (X)ubuntu 7.10
contact me for more ...

i assigned this bug to a security vulnerability because if your term is sudo and you exit the session an other person can re-enter on your session with enter ctrl+alt+f7 ...

trollord (trollenlord) wrote :

Uhh if you changed that you would get huge amounts of whine about the new behaviour. Also the people would find any need to configure such an inconvenience. An admin should know better than to press ctrl+alt+f1 and just walk away for a cup of coffee...

To post a comment you must log in.
This report contains Public Security information  Edit
Everyone can see this security related information.

Other bug subscribers