Ubuntu
unity8 package

com.canonical.UnityGreeter.HideGreeter defeats password requirement

Bug #1384419 reported by Cris Dywan
258
This bug affects 1 person
Affects Status Importance Assigned to Milestone
unity8 (Ubuntu)
Incomplete
Undecided
Seth Arnold

Bug Description

I have enabled developer mode in my phone(s). I'm required to have a password to enable developer mode. However, it's still possible to call com.canonical.UnityGreeter.HideGreete via adb to unlock without the password. This to me seems to defeat the purpose of the requirement of the password.

Seth Arnold (seth-arnold)
information type: Private Security → Public Security
Revision history for this message
Michael Terry (mterry) wrote :

You can only call that DBus method if you are unconfined and inside the user session already. So I don't *think* this is an issue. But Seth, please correct me if I'm wrong.

Changed in unity8 (Ubuntu):
assignee: nobody → Seth Arnold (seth-arnold)
status: New → Incomplete
Revision history for this message
Seth Arnold (seth-arnold) wrote :

Thanks Michael and Christian; the intention is that connecting via adb will require the screen to be unlocked.

Thanks

To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.