Information disclosure when using an external monitor on a screen-locked system
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Unity |
Confirmed
|
Low
|
Unassigned | ||
unity (Ubuntu) |
Confirmed
|
Low
|
Unassigned |
Bug Description
This problem occurs when my screen is locked on this laptop (such as when resuming from suspend), and I plug an external monitor in: for a brief moment the second screen shows not the locked screen graphic or a blank field, but the contents of what WILL be on that screen once the password is entered. This morning as I did this I noticed a private e-mail on that screen, and realized that this is a security risk.
ProblemType: Bug
DistroRelease: Ubuntu 12.04
Package: unity 5.6.0-0ubuntu4
ProcVersionSign
Uname: Linux 3.2.0-19-generic x86_64
.tmp.unity.
ApportVersion: 1.94.1-0ubuntu2
Architecture: amd64
CompizPlugins: [core,bailer,
CompositorRunning: compiz
Date: Tue Mar 20 10:16:40 2012
DistUpgraded: 2012-02-06 11:08:30,227 DEBUG enabling apt cron job
DistroCodename: precise
DistroVariant: ubuntu
EcryptfsInUse: Yes
GraphicsCard:
Intel Corporation Mobile 4 Series Chipset Integrated Graphics Controller [8086:2a42] (rev 07) (prog-if 00 [VGA controller])
Subsystem: Lenovo Device [17aa:20e4]
Subsystem: Lenovo Device [17aa:20e4]
MachineType: LENOVO 7465CTO
ProcEnviron:
TERM=xterm
LC_COLLATE=C
PATH=(custom, user)
LANG=en_US.UTF-8
SHELL=/bin/bash
ProcKernelCmdLine: root=UUID=
SourcePackage: unity
UpgradeStatus: Upgraded to precise on 2012-03-13 (7 days ago)
dmi.bios.date: 06/25/2009
dmi.bios.vendor: LENOVO
dmi.bios.version: 6DET55WW (3.05 )
dmi.board.name: 7465CTO
dmi.board.vendor: LENOVO
dmi.board.version: Not Available
dmi.chassis.
dmi.chassis.type: 10
dmi.chassis.vendor: LENOVO
dmi.chassis.
dmi.modalias: dmi:bvnLENOVO:
dmi.product.name: 7465CTO
dmi.product.
dmi.sys.vendor: LENOVO
version.compiz: compiz 1:0.9.7.
version.ia32-libs: ia32-libs N/A
version.libdrm2: libdrm2 2.4.30-1ubuntu1
version.
version.
version.
version.
version.
version.
version.
version.
visibility: | private → public |
visibility: | private → public |
Changed in unity (Ubuntu): | |
importance: | Undecided → Low |
security vulnerability: | yes → no |
security vulnerability: | yes → no |
Changed in unity: | |
importance: | Undecided → Low |
status: | New → Confirmed |
that's likely a duplicate bug we should really do something about this long standing security issue.