dx-packages team mailing list archive

[Marc Deslauriers <marc.deslauriers@xxxxxxxxxxxxx>]

This was fixed by this security update:
http://www.ubuntu.com/usn/usn-2184-1/

** Changed in: unity (Ubuntu Trusty)
       Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of DX
Packages, which is subscribed to unity in Ubuntu.
Matching subscriptions: dx-packages
https://bugs.launchpad.net/bugs/1308850

Title:
  Dash is visible on top of the lockscreen after screen monitor auto
  locks

Status in Unity:
  Fix Committed
Status in “unity” package in Ubuntu:
  In Progress
Status in “unity” source package in Trusty:
  Fix Released

Bug description:
  [Impact]

  This is 100% reproducible on my side with an updated 14.04

  I have a laptop that after 3 minutes of inactivity shutdown the screen
  and lock-it.

  If I press the SUPER button to activate the dash and then I wait 3 minutes for auto screen locking the screen become black.
  After that when I move the mouse to go to lockscreen and unlock my session, I see the dash on top of the lockscreen.
  I can digit my password and unlock the laptop pressing enter but I cannot see the username, box, dots etc
  I think that the screenshot attached explain very whell what I'm writing.

  I think that this is a security problem because as you can see from my
  screenshot other people can see my personal data (file and folders)
  without authorization.

  [Test Case]

  (1) Make sure the screen lock is enabled and has a reasonable timeout set.
  (2) Use the Super button to activate the Dash.
  (3) Wait for the screen lock timeout so the lockscreen / screensaver comes up.
  (4) Move the mouse or press a shift key to display the lockscreen.
  (5) The Dash should not appear on top of the lockscreen.

  [Regression Potential]

  None.  The fix is to explicitly undisplay the dash when the screen is
  locked.

To manage notifications about this bug go to:
https://bugs.launchpad.net/unity/+bug/1308850/+subscriptions