user security compromised when switching users
Bug #77991 reported by
Czechdolph
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
gdm (Ubuntu) |
Invalid
|
Undecided
|
Unassigned |
Bug Description
Binary package hint: gdm
Hi,
Along similar lines to 48450 and 47005 - when I lock my session, it is possible for another users to then switch to their account, and upon logging in X appears to crash, restart, and then the default login screen reappears however with a nautilus window open showing the home directory of the previously (original) logged in user, with the ability to navigate freely within it......
I have reproduced this many times myself i.e. it was not a freak occurrence. Sometimes it coincides with Mozilla crashing out and asking to start or restore, and my system was an upgrade from Dapper not a fresh install.
Hope someone can plug this!!!
CzD
To post a comment you must log in.
Thanks for the report. When it does happen, what are the steps you take to see it happen?