Bug 1062933

Summary: Security Alert! You can gain user control once you wake up from hibernation!
Product: [Fedora] Fedora Reporter: Ali Akcaagac <aliakc>
Component: gnome-shellAssignee: Owen Taylor <otaylor>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 20CC: agk, fmuellner, otaylor, samkraju, walters
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-02-11 21:31:49 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Ali Akcaagac 2014-02-08 21:37:24 UTC 
I opened a bugreport a couple of days ago because I assumed it to a GDM cause. Sadly no response, so it also could be a gnome-shell issue.

https://bugzilla.redhat.com/show_bug.cgi?id=1061148

;--- Report

I found a serious security issue which is reproducible everytime here with Fedora 20.

Open gnome-terminal and make it fullscreen (F11)

tar xfjv some big file (say 1gb or something like that).

Under heavy harddrive load go and lock your screen under GNOME.

You get into the "Shield" of GDM (or gnome shell) where you can enter your password, make volume higher or lower and so on.

Now close the lid of your notebook so everything goes into hibernation.

Open your lid of your notebook and press "power" to get the machine out of hibernation again.

Voila you are inside your gnome-session. No password required, you can do whatever you want.

Now imagine you leave your notebook for a coffee break or going to the toilet. Someone could come up and grab your work from your notebook.
Comment 1 Vincent Danen 2014-02-11 21:31:49 UTC 
You don't need to open two bug reports for the same issue.

*** This bug has been marked as a duplicate of bug 1061148 ***
Comment 2 Ali Akcaagac 2014-02-11 22:26:04 UTC 
I am not sure whether this is indeed gdm related or gnome-shell related. It depends what of both provides this sliding "shield" kind of thing.