Ubuntu
lightdm package

creating a guest session does not lock the users session

Bug #844274 reported by Andy Whitcroft
272
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Light Display Manager
Fix Released
High
Unassigned
lightdm (Ubuntu)
Fix Released
High
Unassigned
Ubuntu ubuntu-11.10-beta-2
Oneiric
Fix Released
High
Unassigned
Ubuntu ubuntu-11.10-beta-2

Bug Description

When creating a guest session from the 'Andy Whitcroft' menu the gues session appears correctly. When switching back the users session is not locked. Bad.

ProblemType: Bug
DistroRelease: Ubuntu 11.10
Package: lightdm 0.9.3-0ubuntu8
ProcVersionSignature: Ubuntu 3.0.0-10.16-generic 3.0.4
Uname: Linux 3.0.0-10-generic i686
NonfreeKernelModules: wl
Architecture: i386
Date: Wed Sep 7 13:34:07 2011
EcryptfsInUse: Yes
InstallationMedia: Ubuntu 10.04 LTS "Lucid Lynx" - Release i386 (20100429)
SourcePackage: lightdm
UpgradeStatus: Upgraded to oneiric on 2011-08-05 (33 days ago)

Revision history for this message
Andy Whitcroft (apw) wrote :
Jamie Strandboge (jdstrand)
visibility: private → public
Changed in lightdm (Ubuntu Oneiric):
milestone: none → ubuntu-11.10-beta-2
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

I am able to confirm this with unity-2d in an up to date Oneiric VM.

Changed in lightdm (Ubuntu Oneiric):
status: New → Confirmed
Revision history for this message
Robert Ancell (robert-ancell) wrote :

Confirmed. This should be the responsibility of the indicator - it should lock the session before doing the switch so returning to the session it should be in a locked state. There may be a bug in lightdm and it's unlocking the session when it shouldn't, so I'll check that.

Changed in lightdm (Ubuntu Oneiric):
status: Confirmed → Triaged
importance: Undecided → High
Revision history for this message
Martin Pitt (pitti) wrote :

When I just start a guest session and switch back with Ctrl+Alt+F7, my session is indeed locked. So it seems that the indicator does its job, and as you say, lightdm seems to unlock when using ConsoleKit to switch back?

Revision history for this message
Robert Ancell (robert-ancell) wrote :

Found the problem in lightdm - it was unlocking the session on a switch not matter what triggered the switch. It should only unlock when the user is authenticated, i.e. through a greeter.

Revision history for this message
Robert Ancell (robert-ancell) wrote :

Fixed in lightdm 0.9.6

Changed in lightdm (Ubuntu Oneiric):
status: Triaged → Fix Committed
Changed in lightdm:
status: New → Fix Committed
importance: Undecided → High
Revision history for this message
Gunnar Hjalmarsson (gunnarhj) wrote :

On 2011-09-13 06:32, Robert Ancell wrote:
> This should be the responsibility of the indicator - it
> should lock the session before doing the switch ...

As regards gdm-guest-session, that division of labour proved to be an unnecessary obstacle to certain customization measures (see bug #636693). Don't know if that issue is applicable to the LightDM guest account.

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package lightdm - 0.9.5-0ubuntu2

---------------
lightdm (0.9.5-0ubuntu2) oneiric; urgency=low

  * debian/lightdm.config: When installing from scratch as part of a release
    upgrade, default to lightdm, otherwise ask. (LP: #806559)
  * Add 04_dont_write_files_as_root.patch: Do not write ~/.dmrc and
    ~/.Xauthority as root. [CVE-2011-3349]
  * Add 00upstream_unlock_fix.patch: Only unlock displays if switched to from
    greeter. Cherrypicked from upstream r1137. (LP: #844274)
 -- Martin Pitt <email address hidden> Thu, 15 Sep 2011 08:52:24 +0200

Changed in lightdm (Ubuntu Oneiric):
status: Fix Committed → Fix Released
Robert Ancell (robert-ancell)
Changed in lightdm:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Duplicates of this bug

Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.