*** This bug is a security vulnerability ***
Private security bug reported:
Ubuntu 16.04.2 LTS using Unity
unity-greeter 16.04.2-0ubuntu1
On a HiDPI monitor on a Dell XPS 13 9343 laptop, if you uncheck
com.canonical.unity-greeter -> draw-user-backgrounds and then lock the
desktop:
Expected: the purple placeholder wallpaper should cover the entire desktop
Observed: the purple placeholder wallpaper only covers the top-left part of the
desktop
I'm attaching an image showing roughly what the desktop looks like when
it's locked. The green rectangle is the part covered by the purple
wallpaper, the red is stuff that should not be visible when locked, and
the yellow is the usual name/password entry box that is partially
transparent.
I'm marking this bug as a security vulnerability because it allows
someone to see part of a user's desktop even when the desktop is locked.
** Affects: unity-greeter (Ubuntu)
Importance: Undecided
Status: New
** Attachment added: "Image showing roughly what the desktop looks like when
it's locked"
https://bugs.launchpad.net/bugs/1666359/+attachment/4823030/+files/lock_screen_bug.jpg
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to unity-greeter in Ubuntu.
https://bugs.launchpad.net/bugs/1666359
Title:
Lock screen doesn't cover entire desktop on HiDPI display with draw-
user-backgrounds unchecked
Status in unity-greeter package in Ubuntu:
New
Bug description:
Ubuntu 16.04.2 LTS using Unity
unity-greeter 16.04.2-0ubuntu1
On a HiDPI monitor on a Dell XPS 13 9343 laptop, if you uncheck
com.canonical.unity-greeter -> draw-user-backgrounds and then lock the
desktop:
Expected: the purple placeholder wallpaper should cover the entire desktop
Observed: the purple placeholder wallpaper only covers the top-left part of
the desktop
I'm attaching an image showing roughly what the desktop looks like
when it's locked. The green rectangle is the part covered by the
purple wallpaper, the red is stuff that should not be visible when
locked, and the yellow is the usual name/password entry box that is
partially transparent.
I'm marking this bug as a security vulnerability because it allows
someone to see part of a user's desktop even when the desktop is
locked.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/unity-greeter/+bug/1666359/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
