password visible on console during logout

Bug #2066363 reported by Asif Maqbool
264
This bug affects 2 people
Affects Status Importance Assigned to Milestone
gnome-shell (Ubuntu)
Confirmed
Undecided
Unassigned
plymouth (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

release = 22.04

gdm3 ver 42.0-1ubuntu7.22.04.4

systemd 249.11-0ubuntu3.12

libpam-systemd 249.11-0ubuntu3.12

Expected behaviour : logout, console screen/cursor is briefly shown before being returned to the login screen

Observed behaviour :

workstation is domain joined with sssd

upon logout the username/password is displayed on the console screen before being returned to the login screen.

Tags: jammy
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in gdm3 (Ubuntu):
status: New → Confirmed
Changed in systemd (Ubuntu):
status: New → Confirmed
Revision history for this message
Leonidas S. Barbosa (leosilvab) wrote :

Hello,

what if you disable-show-password in /org/gnome/desktop/lockdown to true for the gdm and gsettings set org.gnome.desktop.lockdown disable-show-password true
?

Revision history for this message
Asif Maqbool (asifmaqbool) wrote :

The username/password is shown on a console/terminal screen when logging out and before being returned to the login screen

information type: Private Security → Public Security
tags: added: jammy
Revision history for this message
Daniel van Vugt (vanvugt) wrote :

This was previously fixed in bug 1767918 and bug 1803993

affects: gdm3 (Ubuntu) → gnome-shell (Ubuntu)
affects: systemd (Ubuntu) → plymouth (Ubuntu)
Revision history for this message
Asif Maqbool (asifmaqbool) wrote (last edit ):

Package versions installed appear to be the latest availalble.

gnome shell : 42.9-0ubuntu2.1

plymouth : 0.9.5+git20211018-1ubuntu3

To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.