Ubuntu
gnome-screensaver package

Stopping udev causes gnome-screensaver to accept any password

Bug #65615 reported by John Dong
256
Affects Status Importance Assigned to Milestone
gnome-screensaver (Ubuntu)
Invalid
Undecided
Ubuntu Desktop Bugs

Bug Description

Summary:

If one stops udev, gnome-screensaver will accept any password for unlocking the screen... even if one restarts udev (i.e. to test a new udev rule)

To Reproduce:

(1) Run /etc/init.d/udev stop
(2) Run /etc/init.d/udev start
(3) Lock screen
(4) Type gibberish into password box

What happens:
Screen unlocks

What should happen:
The screen should stay locked. At worst it should display an error and refuse to accept any password, but it certainly shouldn't just unlock with any password.

Revision history for this message
Kees Cook (kees) wrote :

Hello! Thanks for the report. I cannot reproduce this in Edgy. Which version of Ubuntu did this happen with? Do you have any custom PAM configurations?

Changed in gnome-screensaver:
status: Unconfirmed → Needs Info
Revision history for this message
John Dong (jdong) wrote :

This happens on a stock Edgy i386 box, no PAM changes...

Revision history for this message
Emmanuel Touzery (emmanuel-touzery) wrote :

works for me too, on up-to-date edgy.

ran
 sudo /etc/init.d/udev stop

then
 sudo /etc/init.d/udev start

then locked screen, tried to enter any text for password, but only the right password let me unlock the screen

Revision history for this message
Sebastien Bacher (seb128) wrote :

do you still get the bug?

Revision history for this message
Pedro Villavicencio (pedro) wrote :

We are closing this bug report as it lacks the information, described in the previous comments, we need to investigate the problem further. However, please reopen it if you can give us the missing information and don't hesitate to submit bug reports in the future.

Changed in gnome-screensaver:
assignee: nobody → desktop-bugs
status: Incomplete → Invalid
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.