desktop-packages team mailing list archive

[Rolf Leggewie <562509@xxxxxxxxxxxxxxxxxx>]

lucid has seen the end of its life and is no longer receiving any
updates. Marking the lucid task for this ticket as "Won't Fix".

** Changed in: gdm (Ubuntu Lucid)
       Status: Fix Committed => Won't Fix

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gdm in Ubuntu.
https://bugs.launchpad.net/bugs/562509

Title:
  Automounts users autofs home directories by default (face browser
  disabled)

Status in GDM: The Gnome Display Manager:
  Fix Released
Status in gdm package in Ubuntu:
  Fix Released
Status in gdm source package in Lucid:
  Won't Fix

Bug description:
  Binary package hint: gdm

  Even with the face browser disabled when GDM starts it mounts up to
  100 users autofs home dirs. This is an issue since having hundreds of
  desktops hosts automatically mount autofs home dirs when they'll most
  likely not be used could cause a resource issue on the file server.
  This is as a possible security too issue since the system is
  automatically mounting home dirs without authentication.

  Description:	Ubuntu lucid (development branch) - sync'd from main repos on April 13th
  Release:	10.04
  Package:
  gdm:
    Installed: 2.30.0-0ubuntu4
    Candidate: 2.30.0-0ubuntu4
    Version table:
   *** 2.30.0-0ubuntu4 0
          500 http://apt-dev/ubuntu/ lucid/main Packages
          100 /var/lib/dpkg/status

  What was done:
  Face browser disabled per: https://wiki.ubuntu.com/SecurityTeam/FAQ#GNOME%20Display%20Manager%20%28gdm%29
  sudo -u gdm gconftool-2 --set --type boolean /apps/gdm/simple-greeter/disable_user_list true

  Expected behavior:
  GDM displays username prompt with no filesystems mounted with the exception of those in /etc/fstab. Once a user logs in successfully their home dir should automount.

  Actual behavior:
  GDM displays username prompt, up to 100+ home dirs from /etc/autofs.home are mounted.

  There is a bug filed in upstream for this as well:
  https://bugzilla.gnome.org/show_bug.cgi?id=607728

To manage notifications about this bug go to:
https://bugs.launchpad.net/gdm/+bug/562509/+subscriptions