encrypted lvm security bug - Install (entire disk) Kubuntu Raring Daily
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| ubiquity (Ubuntu) |
New
|
Undecided
|
Unassigned | ||
Bug Description
Install (entire disk with lvm and encryption) in Kubuntu Desktop powerpc for Raring Daily testcase.
http://
Step 8 failed: Enter a security key and type a different key into the 'confirm a security key' input box. I did this: 2 very obviously, ridiculously, different passkeys.
The installer did not display 'Passwords do not match' and allowed me to continue with the installation. I had no warning and did not correct the mistake but continued to see what would happen. I've been running these testcases with the iso one after the other and later ran into Bug #1171566 Installer crashes after username, password & continue - so don't know how insecure or inaccessible the 'encrypted' system would have been. This seems like a serious problem to me and wonder if its unique to the ppc iso or whether other Kubuntu raring isos exhibit this?
| affects: | ubuntu-manual-tests → ubiquity (Ubuntu) |
| information type: | Private Security → Public Security |
