Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Security Hole in Gnome's Switch-User is Default Config?
View unanswered posts
View posts from last 24 hours
View posts from last 7 days

 
Reply to topic    Gentoo Forums Forum Index Desktop Environments
View previous topic :: View next topic  
Author Message
MankyD
n00b
n00b


Joined: 09 Jul 2003
Posts: 55

PostPosted: Fri Aug 17, 2007 12:10 am    Post subject: Security Hole in Gnome's Switch-User is Default Config? Reply with quote

This could very well simply be the way I have it configured but...

I select log out from the app menu, then choose "switch user". The normal login/greeting screen appears. If a different user then logs in, then logs out, or if they simply select "quit", it jumps right back into my logged session.

How do I set it up so that the current session locks when I select "switch user"?
_________________
http://millionnumbers.com
Own the Number You've Always Dreamed Of - For Free!
Back to top
View user's profile Send private message
goffrie
n00b
n00b


Joined: 14 Mar 2007
Posts: 67

PostPosted: Fri Aug 17, 2007 8:03 pm    Post subject: Reply with quote

Maybe try locking the screen, then choosing "switch user" from the password prompt? That'd be (I hope) a workaround, but I don't know how to do this by default.
Back to top
View user's profile Send private message
Friesi
Tux's lil' helper
Tux's lil' helper


Joined: 06 Dec 2003
Posts: 89

PostPosted: Sat Aug 18, 2007 6:56 pm    Post subject: Reply with quote

I can confirm that problem.
At the moment it's no problem for me, because just my PC @home.

It's a bug or just a bad setting?
_________________
Hesekiel 25:17

Der Pfad der Gerechten ist zu beiden Seiten gesäumt mit Freveleien der Selbstsüchtigen und der Tyrannei böser Männer ...
Back to top
View user's profile Send private message
trilexx
Apprentice
Apprentice


Joined: 19 Jul 2004
Posts: 217
Location: Austria

PostPosted: Sun Aug 19, 2007 10:00 am    Post subject: Reply with quote

I can confirm that too. This definitely needs to be reported. It should be as secure as possible by default and only further configuration by the user/admin should make it less secure...
Code:

[ebuild   R   ] gnome-base/gnome-2.18.2-r1
[ebuild   R   ] gnome-base/gdm-2.18.4


trilexx
_________________
if it lives, compile it :D
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Desktop Environments All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum