This isn't a bug, it's working as designed. The fact is to perform these steps you need physical access to the machine in question. If you have physical access to a machine, then all bets are off, you've got full access to the system. You could remove the hard drive and put it in another machine and read the files, or in the case of a laptop, pick up the entire machine and walk away with it.
You can mitigate this by encrypting the drive on your machine. This will make it impossible to do these steps without knowing the key used to encrypt the drive. ** Changed in: ubuntu Status: New => Invalid -- Changing passwords without asking for the original one https://bugs.launchpad.net/bugs/267086 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs