epoptes team mailing list archive

[Alkis Georgopoulos <965408@xxxxxxxxxxxxxxxxxx>]

*** This bug is a duplicate of bug 880774 ***
    https://bugs.launchpad.net/bugs/880774

It would be a security vulnerability only if by default, without epoptes-client installed, all machines were locked. :)
It's a duplicate of LP bug #880774, marking as such...


** This bug has been marked a duplicate of bug 880774
   screen-lock can be bypassed

** Visibility changed to: Public

** This bug is no longer flagged as a security vulnerability

-- 
You received this bug notification because you are a member of Epoptes
Developers, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/965408

Title:
  If a client machine has a menu display on screen, and  then the
  client's screen is  locked with Epoptes master, the menu remains
  displayed and active on top of the locked screen.

Status in Epoptes:
  New

Bug description:
  Even though I am not a security expert, I think this is a potential security vulnerabity as it enable a client to execute a command on the machine even if they have been lockout.
  For example,  if I click on the application menu of an of edubuntu 10.04 (which is an epoptes client)  and leave the menu displayed, if I am locked out from an epoptes master machine, I would still be able to execute and of the programs on the displayed menu, even though I have been locked out.

To manage notifications about this bug go to:
https://bugs.launchpad.net/epoptes/+bug/965408/+subscriptions