Pressing ctrl-alt-T gets you a root terminal in oem-config

Bug #594233 reported by Mario Limonciello
260
This bug affects 1 person
Affects Status Importance Assigned to Milestone
ubiquity (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

Binary package hint: ubiquity

ubiquity: 2.2.24
ubuntu 10.10 daily june-14

Summary:

During oem-config, if a user presses ctrl-alt-t, they get a root terminal, and could wreck havok on the system, bypass EULA's and do other general damage before the machine is configured for the first time.

visibility: private → public
Changed in ubiquity (Ubuntu):
status: New → Confirmed
Changed in ubiquity (Ubuntu):
status: Confirmed → Fix Committed
Revision history for this message
Colin Watson (cjwatson) wrote :
Download full text (4.2 KiB)

ubiquity (2.3.18) maverick; urgency=low

  [ Evan Dandrea ]
  * Improve the text on the prepare page, based on input from Matthew
    Paul Thomas, Amanda Brock, and Andrew Sinclair
    (LP: #635269, LP: #635260).
  * Translate latitude and longitude from the Geonames service to its
    respective Olsen timezone database entry.
  * Add back the hostname entry (LP: #628087).
  * Use a block device icon for cases where we cannot detect the
    operating system on a partition.
  * Set the amount of used space on a partition that we presume contains
    no operating system (LP: #626299).
  * Make requiring a password to log in the default again, matching the
    behavior in the previous version of Ubuntu.
  * Use the correct string for the resize partition option.
  * Set the size of the disk on the automatic partitioning page
    (LP: #626299).
  * Use dmidecode to get a more unique suffix for the hostname
    (LP: #628087).
  * Also generate a sample hostname when generating a sample username
    (LP: #634279).
  * Only set the next button to 'Install Now' when not on the first
    partitioning page (LP: #636392).
  * Fix transposed latitude and longitude in geonames lookup.
  * Provide a version parameter to the geoname lookup.
  * Show the number of partitions that will be deleted when in 'use
    entire disk' mode.
  * Remove Pango markup from the debconf templates where possible.
  * Properly set the partition widget description label.
  * Use a GtkMenuBar rather than a GtkMenu as the source of the dark
    styling to match recent changes to the default theme.
  * Properly start a ConsoleKit session (LP: #631538).
  * Fix the spacing on the automatic partitioning page.
    gui/gtk/stepPartAuto.ui
  * Correct layout based on suggestions from Matthew Paul Thomas.
  * Correct layout on keyboard guesser.
  * Run the Jockey backend with an in-memory debconf database, and run
    the frontend asynchronously (LP: #627822).
  * Don't show the GTK frontend until it's done constructing the UI.
  * Show a spinning cursor on the X root window in addition to the
    ubiquity window, so it's clear that the installer is loading the
    next page even when the cursor is off the main window.
  * Make return_to_partitioning work with parallel debconf instances
    (LP: #637706).
  * Added a Windows icon for the resize widget. Thanks Otto Greenslade!
  * Disable the alpha warning, albeit late.
  * Add a command line option to not install a bootloader
    (-b, --no-bootloader) (LP: #615033).
  * Do not show 'free space' partitions in the bootloader target
    combobox (LP: #615033).
  * Meet the Geonames.org CC license requirements by adding 'Geonames.org'
    to the map.
  * Install the restricted package independent of the apt-installed
    packages, since those are installed with just the live CD's
    sources.list (LP: #638073).
  * Disable the wireless plugin for now. It's not ready for release.
  * Make use of the new connectivity check page.
  * Automatic update of included source packages: apt-setup
    1:0.45ubuntu2, hw-detect 1.73ubuntu5.

  [ Mario Limonciello ]
  * Restore the functionality of the noninteractive frontend.
  * Disable GVFS fuse dae...

Read more...

Changed in ubiquity (Ubuntu):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.