After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 708051 - switching users without locking screen allows user to switch back and interrupt lock
switching users without locking screen allows user to switch back and interru...
Status: RESOLVED FIXED
Product: gnome-shell
Classification: Core
Component: lock-screen
3.9.x
Other Linux
: Normal normal
: ---
Assigned To: gnome-shell-maint
gnome-shell-maint
Depends on:
Blocks:
 
 
Reported: 2013-09-13 22:30 UTC by Seán de Búrca
Modified: 2013-09-26 08:47 UTC
See Also:
GNOME target: ---
GNOME version: ---


Attachments
SystemMenu: wait for a completed paint before switching VT (1.20 KB, patch)
2013-09-25 12:05 UTC, Giovanni Campagna
committed Details | Review

Description Seán de Búrca 2013-09-13 22:30:45 UTC
When switching to another user, the lock screen does not begin to activate for the first user until after switching back to the first. After switching back, the fade animation is displayed and the user can interrupt the locking. This could potentially allow a user to gain access to another user's account.
Comment 1 Giovanni Campagna 2013-09-25 12:05:34 UTC
Created attachment 255680 [details] [review]
SystemMenu: wait for a completed paint before switching VT

Activating the GDM login screen switches VT and causes X to freeze
event processing (because it lost the drm master), so must make
sure to have painted the lock screen at least once before proceeding,
or the user can go back and see the unlocked desktop.
Comment 2 Colin Walters 2013-09-25 13:10:06 UTC
Review of attachment 255680 [details] [review]:

I thought we fixed this once before, but anyways, looks right to me.
Comment 3 Giovanni Campagna 2013-09-26 08:47:11 UTC
Attachment 255680 [details] pushed as 3b1b9f5 - SystemMenu: wait for a completed paint before switching VT