touch-packages team mailing list archive

[kevin gunn <kevin.gunn@xxxxxxxxxxxxx>]

according to mterry 2 things need to happen.
1) dialer app shouldn't allow those features in a locked mode
2) shell should have an extra measure to prevent the exploit

** Changed in: unity8 (Ubuntu)
     Assignee: (unassigned) => Michael Terry (mterry)

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to unity8 in Ubuntu.
https://bugs.launchpad.net/bugs/1375513

Title:
  bypass lock on shell possible

Status in Dialer app for Ubuntu Touch:
  New
Status in “unity8” package in Ubuntu:
  New

Bug description:
  from a private bug 1374773

  With the "Recent" option in the dialer in emergency call mode it's
  possible to get to the task switcher, app scope

  Steps to reproduce

  1. Set a passcode
  2. Swipe away welcome screen
  3. Tap 'emergency call' - phone opens
  4. Swipe "Recent" bottom edge up
  5. Swipe a contact left, choose message (screen locks, wait for osk)
  6. Swipe away osk
  7. Tap 'emergency call' - phone opens again to 'recent'
  8. Swipe left a person, tap person icon (screen locks)
  9. Tap 'emergency call'
  10. Swipe in from right of screen, observe muliple apps, and you can pick any of them.

  This bypasses screen lock.

To manage notifications about this bug go to:
https://bugs.launchpad.net/dialer-app/+bug/1375513/+subscriptions