When switching user, session is not properly locked

Bug #904006 reported by Nicolas Delvaux
34
This bug affects 4 people
Affects Status Importance Assigned to Milestone
GNOME Panel
New
Critical
Light Display Manager
New
Undecided
Unassigned
lightdm (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

Try the following:

- Log in a gnome-classic session
- Select "Switch User" in the top-right menu
(you are now on lightdm, your former session is supposed to be protected by a password)
- Switch to a random TTY
- Switch back to the graphical session: you are now in your first session, without entering any password.

This bug seems to occur with the combination of gnome-classic (with or without effects) and lightdm. Also occurs with the combination of Xfce and lightdm in Xubuntu 16.04 at least, if light-locker is not used (i.e. xflock4 calls another locker).

No problem with Unity or Gnome-Shell with lightdm.
With GDM3, no problem with gnome-classic.

ProblemType: Bug
DistroRelease: Ubuntu 11.10
Package: lightdm 1.0.6-0ubuntu1.2
ProcVersionSignature: Ubuntu 3.0.0-14.23-generic 3.0.9
Uname: Linux 3.0.0-14-generic x86_64
NonfreeKernelModules: fglrx
ApportVersion: 1.23-0ubuntu4
Architecture: amd64
Date: Tue Dec 13 23:53:46 2011
InstallationMedia: Ubuntu 11.10 "Oneiric Ocelot" - Release amd64 (20111012)
SourcePackage: lightdm
UpgradeStatus: Upgraded to oneiric on 2011-12-13 (0 days ago)

Revision history for this message
Nicolas Delvaux (malizor) wrote :
description: updated
security vulnerability: yes → no
security vulnerability: yes → no
visibility: private → public
visibility: private → public
Revision history for this message
Sebastien Bacher (seb128) wrote :

lightdm has little to do with the user session, that seems rather a gnome-panel issue

Revision history for this message
Nicolas Delvaux (malizor) wrote :

Well, the thing is that there is no problem with GDM3.

Revision history for this message
Sebastien Bacher (seb128) wrote :

well it doesn't mean it's not a bug in the gnome fallback session, it should not rely on the login manager to lock the screen since there is no garanty the one you use will do that for you, under unity the indicator do lock the screen before calling the user switching

Revision history for this message
Nicolas Delvaux (malizor) wrote :

I reported a bug upstream against gnome-panel: https://bugzilla.gnome.org/show_bug.cgi?id=666860

Changed in gnome-panel:
importance: Undecided → Unknown
status: New → Unknown
Changed in gnome-panel:
importance: Unknown → Critical
status: Unknown → New
Revision history for this message
Robert Ancell (robert-ancell) wrote :

Is this confirmed in 12.04 final?

Revision history for this message
Nicolas Delvaux (malizor) wrote :

Yes this is confirmed.

However, it does not happen anymore on a default Precise classic-session, because it uses indicators.
This bug only happens when user-switching with the vanilla Gnome "Personal Menu" applet.

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in lightdm (Ubuntu):
status: New → Confirmed
Revision history for this message
MaggieC (imbubble) wrote :

any news?

Revision history for this message
MaggieC (imbubble) wrote :
Revision history for this message
Jarno Suni (jarnos) wrote :

This bug affects Xfce, too, if light-locker is not running.

Jarno Suni (jarnos)
summary: - When switching user, session is not properly locked (Gnome-classic)
+ When switching user, session is not properly locked
Jarno Suni (jarnos)
description: updated
description: updated
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.