User can terminate a session from the lock screen

Bug #1667655 reported by Jean-Baptiste Lallement
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Canonical System Image
Triaged
Medium
Michał Sawicz
unity8 (Ubuntu)
Triaged
Medium
Unassigned

Bug Description

Test Case
1. Start a unity8 session
2. Lock the screen
3. Open the system menu
4. Tap on 'Close session' or 'Shutdown'

Actual result
The active session is closed or the system powered off

Expected result
When a user session is locked the only action possible should to suspend the machine or switch to another account, certainly not to close someone else session or shutdown the machine which also means a risk of data loss.

ProblemType: Bug
DistroRelease: Ubuntu 17.04
Package: unity8 8.15+17.04.20170216.1-0ubuntu1
ProcVersionSignature: Ubuntu 4.10.0-8.10-generic 4.10.0-rc8
Uname: Linux 4.10.0-8-generic x86_64
ApportVersion: 2.20.4-0ubuntu2
Architecture: amd64
Date: Fri Feb 24 12:30:27 2017
InstallationDate: Installed on 2014-07-23 (946 days ago)
InstallationMedia: Ubuntu 14.04.1 LTS "Trusty Tahr" - Release amd64 (20140722.2)
ProcEnviron:
 TERM=screen-256color
 PATH=(custom, no user)
 XDG_RUNTIME_DIR=<set>
 LANG=fr_FR.UTF-8
 SHELL=/bin/bash
SourcePackage: unity8
UpgradeStatus: Upgraded to zesty on 2016-11-15 (100 days ago)

Revision history for this message
Jean-Baptiste Lallement (jibel) wrote :
Revision history for this message
Michał Sawicz (saviq) wrote :

FWIW there's nothing preventing the user at the keyboard from going Ctrl+Alt+F1 and pressing Ctrl+Alt+Del or the power button...

Changed in canonical-devices-system-image:
status: New → Triaged
Changed in unity8 (Ubuntu):
status: New → Triaged
Changed in canonical-devices-system-image:
importance: Undecided → High
Changed in unity8 (Ubuntu):
importance: Undecided → High
Changed in canonical-devices-system-image:
assignee: nobody → Michał Sawicz (saviq)
importance: High → Medium
Changed in unity8 (Ubuntu):
importance: High → Medium
Revision history for this message
kevin gunn (kgunn72) wrote :

i actually thot this was a feature

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.