unity retains focus on virtualbox session when locked
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Unity |
Invalid
|
Undecided
|
Unassigned | ||
unity (Ubuntu) |
Invalid
|
High
|
Unassigned |
Bug Description
While using virtualbox in fullscreen mode, CTRL + ALT + L, leaves focus with the virtual machine. However this still locks the host's unity session. This leaves all key events trapped in the virtual machine, so typing in your password becomes impossible. After a reboot all functionality returned.
This could be a potential security hazard, depending on the virtual machine being used, as it allows arbitrary commands to be executed through a locked unity session without any authentication.
lsb_release -rd
Description: Ubuntu 14.04 LTS
Release: 14.04
apt-cache policy unity
unity:
Installed: 7.2.1+14.
Candidate: 7.2.1+14.
Version table:
*** 7.2.1+14.
500 http://
100 /var/lib/
information type: | Private Security → Public |
Changed in unity: | |
status: | New → Confirmed |
Changed in unity (Ubuntu): | |
importance: | Undecided → High |
Status changed to 'Confirmed' because the bug affects multiple users.