| 2017-02-21 02:11:52 |
Jeremy Nation |
bug |
|
|
added bug |
| 2017-02-21 02:11:52 |
Jeremy Nation |
attachment added |
|
Image showing roughly what the desktop looks like when it's locked https://bugs.launchpad.net/bugs/1666359/+attachment/4823030/+files/lock_screen_bug.jpg |
|
| 2017-02-21 02:17:58 |
Jeremy Nation |
information type |
Public |
Private Security |
|
| 2017-02-21 12:10:55 |
Marc Deslauriers |
affects |
unity-greeter (Ubuntu) |
unity (Ubuntu) |
|
| 2017-02-21 12:11:03 |
Marc Deslauriers |
information type |
Private Security |
Public Security |
|
| 2017-02-22 01:39:35 |
Launchpad Janitor |
branch linked |
|
lp:~3v1n0/unity/lockscreen-background-scaling-fixes |
|
| 2017-02-22 01:41:51 |
Marco Trevisan (Treviño) |
unity (Ubuntu): status |
New |
In Progress |
|
| 2017-02-22 01:41:54 |
Marco Trevisan (Treviño) |
unity (Ubuntu): importance |
Undecided |
High |
|
| 2017-02-22 01:41:58 |
Marco Trevisan (Treviño) |
unity (Ubuntu): assignee |
|
Marco Trevisan (Treviño) (3v1n0) |
|
| 2017-02-28 09:35:32 |
Launchpad Janitor |
unity (Ubuntu): status |
In Progress |
Fix Released |
|
| 2017-07-05 15:52:03 |
Launchpad Janitor |
branch linked |
|
lp:~unity-team/unity/x-sru5 |
|
| 2017-07-06 10:22:46 |
Marco Trevisan (Treviño) |
nominated for series |
|
Ubuntu Xenial |
|
| 2017-07-06 12:09:11 |
Launchpad Janitor |
branch linked |
|
lp:~ci-train-bot/unity/unity-ubuntu-xenial-2841 |
|
| 2017-07-17 09:51:24 |
Andrea Azzarone |
description |
Ubuntu 16.04.2 LTS using Unity
unity-greeter 16.04.2-0ubuntu1
On a HiDPI monitor on a Dell XPS 13 9343 laptop, if you uncheck com.canonical.unity-greeter -> draw-user-backgrounds and then lock the desktop:
Expected: the purple placeholder wallpaper should cover the entire desktop
Observed: the purple placeholder wallpaper only covers the top-left part of the desktop
I'm attaching an image showing roughly what the desktop looks like when it's locked. The green rectangle is the part covered by the purple wallpaper, the red is stuff that should not be visible when locked, and the yellow is the usual name/password entry box that is partially transparent.
I'm marking this bug as a security vulnerability because it allows someone to see part of a user's desktop even when the desktop is locked. |
Ubuntu 16.04.2 LTS using Unity
unity-greeter 16.04.2-0ubuntu1
[Impact]
On a HiDPI monitor on a Dell XPS 13 9343 laptop, if you uncheck com.canonical.unity-greeter -> draw-user-backgrounds and then lock the desktop:
Expected: the purple placeholder wallpaper should cover the entire desktop
Observed: the purple placeholder wallpaper only covers the top-left part of the desktop
I'm attaching an image showing roughly what the desktop looks like when it's locked. The green rectangle is the part covered by the purple wallpaper, the red is stuff that should not be visible when locked, and the yellow is the usual name/password entry box that is partially transparent.
I'm marking this bug as a security vulnerability because it allows someone to see part of a user's desktop even when the desktop is locked.
[Test Case]
1. Make sure to use an HiDPI monitor
2. Open terminal
3. gsettings set com.canonical.unity-greeter draw-user-backgrounds false
4. Lock the screen
5. Make sure the background is properly drawn.
[Potential Regression]
Make sure lockscreen background is drawn properly on an non-HiDPI monitor too. Also make sure that when using "draw-user-backgrounds == true" the background is properly drawn. |
|
| 2017-11-30 20:48:26 |
Brian Murray |
unity (Ubuntu Xenial): status |
New |
Fix Committed |
|
| 2017-11-30 20:48:28 |
Brian Murray |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2017-11-30 20:48:30 |
Brian Murray |
bug |
|
|
added subscriber SRU Verification |
| 2017-11-30 20:48:33 |
Brian Murray |
tags |
|
verification-needed verification-needed-xenial |
|
| 2018-02-16 00:06:32 |
Launchpad Janitor |
unity (Ubuntu Xenial): status |
Fix Committed |
Fix Released |
|
