dx-packages team mailing list archive

[Launchpad Bug Tracker <1308850@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package unity -
7.2.0+14.04.20140423-0ubuntu1.1

---------------
unity (7.2.0+14.04.20140423-0ubuntu1.1) trusty-security; urgency=medium

  * SECURITY UPDATE: lock screen bypass (LP: #1313885)
    - debian/patches/lp1313885.patch: improve lockscreen logic in
      lockscreen/LockScreenController.cpp, lockscreen/LockScreenShield.*,
      plugins/unityshell/src/unityshell.*.
 -- Marc Deslauriers <marc.deslauriers@xxxxxxxxxx>   Mon, 28 Apr 2014 22:29:13 -0400

** Changed in: unity (Ubuntu)
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of DX
Packages, which is subscribed to unity in Ubuntu.
Matching subscriptions: dx-packages
https://bugs.launchpad.net/bugs/1308850

Title:
  Dash is visible on top of the lockscreen after screen monitor auto
  locks

Status in Unity:
  Fix Committed
Status in “unity” package in Ubuntu:
  Fix Released
Status in “unity” source package in Trusty:
  Fix Released

Bug description:
  [Impact]

  This is 100% reproducible on my side with an updated 14.04

  I have a laptop that after 3 minutes of inactivity shutdown the screen
  and lock-it.

  If I press the SUPER button to activate the dash and then I wait 3 minutes for auto screen locking the screen become black.
  After that when I move the mouse to go to lockscreen and unlock my session, I see the dash on top of the lockscreen.
  I can digit my password and unlock the laptop pressing enter but I cannot see the username, box, dots etc
  I think that the screenshot attached explain very whell what I'm writing.

  I think that this is a security problem because as you can see from my
  screenshot other people can see my personal data (file and folders)
  without authorization.

  [Test Case]

  (1) Make sure the screen lock is enabled and has a reasonable timeout set.
  (2) Use the Super button to activate the Dash.
  (3) Wait for the screen lock timeout so the lockscreen / screensaver comes up.
  (4) Move the mouse or press a shift key to display the lockscreen.
  (5) The Dash should not appear on top of the lockscreen.

  [Regression Potential]

  None.  The fix is to explicitly undisplay the dash when the screen is
  locked.

To manage notifications about this bug go to:
https://bugs.launchpad.net/unity/+bug/1308850/+subscriptions