dx-packages team mailing list archive

[Seth Arnold <1321747@xxxxxxxxxxxxxxxxxx>]

Thanks for the report, Maarten. Do you recall how you locked the screen
and how you unlocked the screen? Can you recall which applications were
running when the screen was locked?

** Information type changed from Private Security to Public Security

-- 
You received this bug notification because you are a member of DX
Packages, which is subscribed to unity in Ubuntu.
Matching subscriptions: dx-packages
https://bugs.launchpad.net/bugs/1321747

Title:
  Unity lock screen bypassed with debsign password prompt

Status in “unity” package in Ubuntu:
  New

Bug description:
  1) Ubuntu 14.04 LTS

  2) unity 7.2.0+14.04.20140423-0ubuntu1.2

  3) What I expected to happen:

  While the lock screen was active, and trying to type in the password
  prompt in the lock screen, my input would be written in that password
  prompt.

  4) What happened instead

  I could not see anything being written in the password field in the
  lock screen. Only after typing a wrong password two-three times, the
  lock screen password field was able to receive input.

  Further investigation showed, that the keyboard input instead ended up
  in a password prompt debsign spawned while the lock screen was active
  - a place where it under no circumstance should be able to end up
  while the lock screen is active.

  I'm not able to condense the bug report right now, but it seems quite
  serious to me, so I'd rather report it immediately.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1321747/+subscriptions