This bug was fixed in the package lightdm - 1.19.5-0ubuntu1
---
lightdm (1.19.5-0ubuntu1) yakkety; urgency=medium
* New upstream release:
- Fix errors in documentation generation
- Improve documentation
- Fix guest AppArmor profile to allow guest sessions more access to
Uploaded an updated version to Yakkety (1.19.5-0ubuntu1)
** Changed in: lightdm (Ubuntu)
Status: Triaged => Fix Committed
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1627304
** No longer affects: gnome-session (Ubuntu)
** No longer affects: lightdm-gtk-greeter (Ubuntu)
** No longer affects: unity-greeter (Ubuntu)
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-session in Ubuntu.
https://bugs.launchpad
Assigning the lightdm task to Robert for now since he's already fixed it
upstream.
** Changed in: lightdm (Ubuntu)
Assignee: Ubuntu Security Team (ubuntu-security) => Robert Ancell
(robert-ancell)
--
You received this bug notification because you are a member of Desktop
Packages, which is
@robert-ancell I tested your proposed change to the lightdm AppArmor
abstraction and can confirm that it allows the guest session to start
for me. Thanks for looking into the denials and getting that fixed!
I see that you committed the fix upstream. Do you plan on making another
lightdm upload bef
** No longer affects: xubuntu-default-settings (Ubuntu)
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-session in Ubuntu.
https://bugs.launchpad.net/bugs/1627304
Title:
User locking problems - guest login crashing
Status in app
@robert-ancell - reverted (Xubuntu) to our old default settings, undid
this change and everything works as before.
Change to xubuntu-default-settings was something pitti appears to have
done
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed t
@robert-ancell - tested that on Xubuntu (bug 1627310) works fine there
using something other than light-locker (we have a seperate issue there
bug 1622303)
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-session in Ubuntu.
https://b
Note you can test changes like this by running:
$ sudoedit /etc/apparmor.d/abstractions/lightdm
$ sudo systemctl reload apparmor.service
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-session in Ubuntu.
https://bugs.launchpad.net/b
** Branch linked: lp:lightdm
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-session in Ubuntu.
https://bugs.launchpad.net/bugs/1627304
Title:
User locking problems - guest login crashing
Status in apparmor package in Ubuntu:
The following fix to the abstraction seems to fix the issue:
=== modified file 'data/apparmor/abstractions/lightdm'
--- data/apparmor/abstractions/lightdm 2015-10-19 10:44:23 +
+++ data/apparmor/abstractions/lightdm 2016-09-28 03:39:54 +
@@ -95,7 +95,7 @@
unix (receive) peer=(label=un
Marking the apparmor task as invalid since the changes will likely need
to be made to the profile shipped by lightdm.
** Changed in: apparmor (Ubuntu)
Status: Incomplete => Invalid
** Changed in: lightdm (Ubuntu)
Assignee: (unassigned) => Ubuntu Security Team (ubuntu-security)
--
Yo
Thanks, I gave it a shot (after putting the profile into complain mode)
and here are the unique denials that I see when starting the guest
session:
operation="mknod" profile="/usr/lib/lightdm/lightdm-guest-session"
name="/proc/1295/fd/2" pid=1295 comm="lightdm-session" requested_mask="c"
denied_
Sep 23 21:42:38 wolf-wolf kernel: [ 69.411731] audit: type=1400
audit(1474663358.636:31): apparmor="DENIED" operation="connect"
profile="/usr/lib/lightdm/lightdm-guest-session" pid=3713 comm="initctl"
family="unix" sock_type="stream" protocol=0 requested_mask="send receive
accept" denied_mask="se
(The security team will look soon)
** Changed in: lightdm-gtk-greeter (Ubuntu)
Status: Confirmed => Incomplete
** Changed in: xubuntu-default-settings (Ubuntu)
Status: Confirmed => Incomplete
--
You received this bug notification because you are a member of Desktop
Packages, which
Hi - are there any AppArmor denials in the syslog? To check, you can
trigger this bug and then look in /var/log/syslog for lines that contain
'apparmor="DENIED"'. Thanks!
** Changed in: apparmor (Ubuntu)
Importance: Critical => Undecided
** Changed in: apparmor (Ubuntu)
Status: Triaged
I think this is an issue with the lightdm(-guest-session) apparmor
profiles.
In dmesg:
laney@yakkety-vm:~$ dmesg | grep DENIED
[ 142.273990] audit: type=1400 audit(1474905574.718:125): apparmor="DENIED"
operation="open" profile="/usr/lib/lightdm/lightdm-guest-session"
name="/proc/sys/kernel/os
Tested with Ubuntu MATE, and the guest session works fine there, so the
issue is probably not caused by lightdm.
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-session in Ubuntu.
https://bugs.launchpad.net/bugs/1627304
Title:
Us
>From Xubuntu, see same symptoms as seen previously - that is, can log in
to Guest - logout fails.
Dialogue looks ok for us.
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to unity-greeter in Ubuntu.
https://bugs.launchpad.net/bugs/1627304
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: gnome-session (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to unity-greeter in Ubuntu.
https://bugs.launchpad.n
I could reproduce the issue on Ubuntu 16.10. Additional observations:
* Logging in to a guest session fails also when you do it from the
login screen without being logged in as a regular user, so I doubt
that the issue is related to screen locking.
* The zenity warning dialog shows up, but wi
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: xubuntu-default-settings (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to unity-greeter in Ubuntu.
https://bugs.
In Xubuntu we can login to the gues user desktop - but it crashes on
logout rather than logging in.
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to unity-greeter in Ubuntu.
https://bugs.launchpad.net/bugs/1627304
Title:
User locking pr
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: lightdm-gtk-greeter (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.n
** Also affects: gnome-session (Ubuntu)
Importance: Undecided
Status: New
** Also affects: xubuntu-default-settings (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-sess
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: unity-greeter (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bug
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: lightdm (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1627
A similar issue exists in Xubuntu.
Default xubuntu install however does not allow to resume a locked
session at all.
We've experimented with changing locker from light-locker to gnome-
screensaver and xscreensaver - when using gnome-screensaver we see the
same as with the Ubuntu issue.
bug 16223
28 matches
Mail list logo