Comment 0 for bug 1413790
Revision history for this message
| Andrea Azzarone (azzar1) wrote Lightdm should not emit logind "unlock" signal when the user is in nopasswdlogin group. | #0 |
© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
f33e652
(Get the code!)
Lightdm should not emit logind "unlock" signal when the user is not prompted for a password. This can lead to a security issue:
# Log-in (unity session).
# Add the current user to nopasswdlogin group.
# Lock the sessions.
# Session indicator->Switch account...
# "Login" in again.
Expected behavior:
The lockscreen is still active.
Current behavior:
The session in unlocked.
We could work around the issue directly in unity, but IMHO would be cleaner to avoid that lightdm is emitting the logind signal.