You have been subscribed to a public bug:

Binary package hint: vino

If the "Lock screen on disconnect" feature is enabled, the screen will
indeed be locked when someone disconnects from the VNC server.

However, it appears to function simply by locking the screen whenever
*any* connection to the VNC server terminates.

That is to say, you can telnet to port 5900 on your machine, disconnect
and the screen will lock. You can nmap your machine and the screen will
lock, or you can connect with a legitimate VNC client, but fail to get
the password right or be denied access by vino's "Ask for confirmation"
option, and your screen will lock.

If you enable this feature, anyone with network access to your machine
can DoS you by locking your screen at will. This seems somewhat
unhelpful. The screen should only lock after a *successful* connection.

** Affects: vino
     Importance: Unknown
         Status: Unknown

** Affects: vino (Ubuntu)
     Importance: Medium
     Assignee: Ubuntu Desktop Bugs (desktop-bugs)
         Status: Triaged

-- 
[hardy] "Lock screen on disconnect" overzealous
https://bugs.launchpad.net/bugs/201465
You received this bug notification because you are a member of Ubuntu Desktop 
Bugs, which is a bug assignee.

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

Reply via email to