← Back to team overview

desktop-packages team mailing list archive

[Bug 1305440] Re: Allow a distinct pam config file for greeter and for lock-screen

 

Hello Franck, or anyone else affected,

Accepted unity into trusty-proposed. The package will build now and be
available at
http://launchpad.net/ubuntu/+source/unity/7.2.4+14.04.20141217-0ubuntu1
in a few hours, and then in the -proposed repository.

Please help us by testing this new package.  See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to
enable and use -proposed.  Your feedback will aid us getting this update
out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug,
mentioning the version of the package you tested, and change the tag
from verification-needed to verification-done. If it does not fix the
bug for you, please add a comment stating that, and change the tag to
verification-failed.  In either case, details of your testing will help
us make a better decision.

Further information regarding the verification process can be found at
https://wiki.ubuntu.com/QATeam/PerformingSRUVerification .  Thank you in
advance!

** Also affects: unity (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Also affects: unity-greeter (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Changed in: unity (Ubuntu Trusty)
       Status: New => Fix Committed

** Tags added: verification-needed

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to unity in Ubuntu.
Matching subscriptions: dp-unity
https://bugs.launchpad.net/bugs/1305440

Title:
  Allow a distinct pam config file for greeter and for lock-screen

Status in Unity:
  Fix Committed
Status in Unity 7.2 series:
  In Progress
Status in unity package in Ubuntu:
  Fix Released
Status in unity-greeter package in Ubuntu:
  Invalid
Status in unity source package in Trusty:
  Fix Committed
Status in unity-greeter source package in Trusty:
  New

Bug description:
  [Impact]

  It might be desirable to have a distinct pam config file when logging
  in and when unlocking the screen. Specifically, using a fingerprint
  reader is fine for sudo or for unlocking, but you want to use your
  password when logging in, to provide a secret and be able to unlock
  the gnome-keyring for example.

  [Test Case]

  See http://askubuntu.com/questions/445131/how-do-i-enable-a-specific-
  pam-config-in-the-lockscreen

  So this feature request is about allowing for a (optional) pam config
  file for the lock-screen, distinct from the /etc/pam.d/lightdm
  currently used and shared with the greeter.

  [Regression Potential]

  An additional configuration point could allow a system to be
  misconfigured for reduced security.  The default configuration is to
  use the same PAM stack as the LightDM login process so no new
  regression is introduced without user modification.

  [Other Info]

  The Ubuntu 14.04 LTS SRU patch was cherry-picked from Ubuntu 14.10
  where it has been in production use for a few months and appears
  stable.

To manage notifications about this bug go to:
https://bugs.launchpad.net/unity/+bug/1305440/+subscriptions