Bug 1054764
| Summary: | Handling of ttys is broken. May leak root password to X session. | ||||||
|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Christian Stadelmann <fedora> | ||||
| Component: | xorg-x11-server | Assignee: | X/OpenGL Maintenance List <xgl-maint> | ||||
| Status: | CLOSED CANTFIX | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||
| Severity: | urgent | Docs Contact: | |||||
| Priority: | unspecified | ||||||
| Version: | 21 | CC: | fedora, fleite, jonathan, kzak, mluscon, rstrode, security-response-team, xgl-maint | ||||
| Target Milestone: | --- | ||||||
| Target Release: | --- | ||||||
| Hardware: | x86_64 | ||||||
| OS: | Unspecified | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | Doc Type: | Bug Fix | |||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2015-06-08 18:39:59 UTC | Type: | Bug | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Attachments: |
|
||||||
|
Description
Christian Stadelmann
2014-01-17 12:38:20 UTC
Created attachment 851581 [details]
Output of $ journalctl | grep "chstpc-2 dracut"
In the attached log file the first initramfs (kernel 3.12.6-300, created on 2014-01-03) does not show the described bug. The second initramfs (kernel 3.12.7-300, created on 2014-01-16) shows this bug.
Seems more like a bug in GDM (or gnome-shell) to me. Switched to awesome (not using any DM, startx) about 1 month ago and never saw this problem again. This message is a reminder that Fedora 20 is nearing its end of life. Approximately 4 (four) weeks from now Fedora will stop maintaining and issuing updates for Fedora 20. It is Fedora's policy to close all bug reports from releases that are no longer maintained. At that time this bug will be closed as EOL if it remains open with a Fedora 'version' of '20'. Package Maintainer: If you wish for this bug to remain open because you plan to fix it in a currently maintained version, simply change the 'version' to a later Fedora version. Thank you for reporting this issue and we are sorry that we were not able to fix it before Fedora 20 is end of life. If you would still like to see this bug fixed and are able to reproduce it against a later version of Fedora, you are encouraged change the 'version' to a later Fedora version prior this bug is closed as described in the policy above. Although we aim to fix as many bugs as possible during every release's lifetime, sometimes those efforts are overtaken by events. Often a more recent Fedora release includes newer upstream software that fixes bugs or makes them obsolete. I have seen this in F21, not in F22. Since this bug is so critical someone should look over it before closing. Can this perhaps be dependent on the graphics card driver in use? Which driver or graphics card did you experience this on? I never saw the mouse cursor enabled when going to a text console, on F20 and previous under Gnome/GDM, and on F21 under KDE/SDDM. I also never saw this buggy situation where X and the text console would both get kbd/mouse events. Unfortunately I have always used Intel integrated graphics controllers, so I can't comment on other drivers. I don't know whether this depends on GPU drivers. I saw this on 2 devices with i915 graphics driver on Core i5 processors (1st and 2nd generation) with iGPU. I used Gnome/GDM and disabled (uninstalled) plymouth. Removing Security keyword and group, as this requires local console access and does not look like a real security flaw in the software involved. So far I have not found a single person that could ever reproduce this behavior. GDM didn't muck with the tty in f21 (though it does in f22), so it's unlikely to be culpable. moving to Xorg. Realistically, with no reproducer and only one reporter, (who no longer sees the problem), it's unlikely traction can be made on this bug. For that reason, I'm going to close the bug CANTFIX. |