No password prompt before resetting the device

Bug #1388942 reported by Omer Akram on 2014-11-03
264
This bug affects 3 people
Affects Status Importance Assigned to Milestone
Ubuntu UX
Undecided
Unassigned
ubuntu-system-settings (Ubuntu)
High
Unassigned

Bug Description

I can reset my device just by going to settings and going to reset panel.

The problem is it does not ask for any security key. My case is: someone asks my phone to make a call, they end the call and reset the phone, just like that.

<https://wiki.ubuntu.com/SystemSettings#phone-reset>: "If you use any phone locking scheme, choosing “Reset All System Settings” or “Erase & Reset Everything” in the alert should prompt you to unlock before displaying the alert..."

ProblemType: Bug
DistroRelease: Ubuntu 14.10
Package: ubuntu-system-settings 0.3+14.10.20141022-0ubuntu1
ProcVersionSignature: Ubuntu 3.16.0-24.32-generic 3.16.4
Uname: Linux 3.16.0-24-generic x86_64
ApportVersion: 2.14.7-0ubuntu8
Architecture: amd64
CurrentDesktop: Unity
Date: Mon Nov 3 23:37:18 2014
InstallationDate: Installed on 2014-06-14 (141 days ago)
InstallationMedia: Ubuntu 14.10 "Utopic Unicorn" - Alpha amd64 (20140610.1)
SourcePackage: ubuntu-system-settings
UpgradeStatus: No upgrade log present (probably fresh install)

Omer Akram (om26er) wrote :
Sebastien Bacher (seb128) wrote :

That needs design input, if you hand up an unlocked device to somebody you don't trust you can expect issues (same way that if you give an unlock laptop to somebody)

Changed in ubuntu-system-settings (Ubuntu):
importance: Undecided → Low
Omer Akram (om26er) wrote :

There are a hundred other scenarios where trust is not the problem but your phone still gets fiddled. But that's not the point of discussion. The factory reset is a serious thing.

Matthew Paul Thomas (mpt) wrote :

This is already in the spec.

no longer affects: ubuntu-ux
description: updated
Changed in ubuntu-system-settings (Ubuntu):
importance: Low → High
status: New → Confirmed
Changed in ubuntu-ux:
status: New → Fix Committed
information type: Public → Public Security
Changed in ubuntu-system-settings (Ubuntu):
status: Confirmed → Triaged
To post a comment you must log in.
This report contains Public Security information  Edit
Everyone can see this security related information.

Other bug subscribers