Ubuntu
unity package

  1. Bug #1666359
  2. Comment #0

Comment 0 for bug 1666359

Revision history for this message
Jeremy Nation (jnation) wrote :

Ubuntu 16.04.2 LTS using Unity
unity-greeter 16.04.2-0ubuntu1

On a HiDPI monitor on a Dell XPS 13 9343 laptop, if you uncheck com.canonical.unity-greeter -> draw-user-backgrounds and then lock the desktop:

Expected: the purple placeholder wallpaper should cover the entire desktop
Observed: the purple placeholder wallpaper only covers the top-left part of the desktop

I'm attaching an image showing roughly what the desktop looks like when it's locked. The green rectangle is the part covered by the purple wallpaper, the red is stuff that should not be visible when locked, and the yellow is the usual name/password entry box that is partially transparent.

I'm marking this bug as a security vulnerability because it allows someone to see part of a user's desktop even when the desktop is locked.