When screensaver lock is disabled, terminating a guest session resumes the parent session without asking for a password
Bug #600559 reported by
David Siegel
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| gdm-guest-session (Ubuntu) |
Fix Released
|
Undecided
|
Gunnar Hjalmarsson | ||
Bug Description
Binary package hint: gdm-guest-session
I've disabled my screensaver lock, which had the unintended consequence of allowing anyone using a guest session initiated from my session to log into my session without a password by simply logging out from the guest session.
Expected behavior:
1. I choose "Guest session" from the session menu.
2. Guest session begins.
3. I choose "Log Out..." from the session menu in the guest session.
4. Return to GDM, OR return to my session with a lock screen.
Actual behavior:
1. I choose "Guest session" from the session menu.
2. Guest session begins.
3. I choose "Log Out..." from the session menu in the guest session.
4. My session resumes without lock screen (without asking for a password).
Related branches
| summary: |
- When screensaver lock is disabled, parent session resumes without asking - for a password when guest session terminates + When screensaver lock is disabled, terminating a guest session resumes + the parent session without asking for a password |
| description: | updated |
Revision history for this message
| Gunnar Hjalmarsson (gunnarhj) wrote | #1 |
| tags: | added: patch |
| Changed in gdm-guest-session (Ubuntu): | |
| assignee: | nobody → Gunnar Hjalmarsson (gunnarhj) |
| status: | New → In Progress |
Revision history for this message
| Gunnar Hjalmarsson (gunnarhj) wrote | #2 |
Revision history for this message
| Martin Pitt (pitti) wrote | #3 |
| Changed in gdm-guest-session (Ubuntu): | |
| status: | In Progress → Fix Committed |
Revision history for this message
| Launchpad Janitor (janitor) wrote | #4 |
| Changed in gdm-guest-session (Ubuntu): | |
| status: | Fix Committed → Fix Released |
To post a comment you must log in.
It's not clear to me how you can expect a locked screen if you disable the screensaver lock. Considering the idea with the feature, I would say that launching a guest session ought to be conditioned on a successfully enabled screen lock. I attached a patch with a suggested change in that direction.
Your view on the patch would be appreciated, David.