Bug 680246

Summary: screens not locked with fast user switching
Product: [Fedora] Fedora Reporter: Jeff Bastian <jbastian>
Component: gnome-shellAssignee: Owen Taylor <otaylor>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: urgent Docs Contact:
Priority: urgent    
Version: 15CC: maxamillion, otaylor, samkraju, walters
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-02-24 19:46:00 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Jeff Bastian 2011-02-24 19:32:43 UTC
Description of problem:
While working on the Graphics Test Day (http://fedoraproject.org/wiki/Test_Day:2011-02-24_Intel) I noticed during the fast-user-switch test that I can hit CTRL-ALT-F1 and CTRL-ALT-F7 to bounce between my two users and their screens are NOT locked.

If I use the [user menu]->Switch User option, then it asks for the password when switching users, but it's pretty easy to circumvent this security check with CTRL-ALT-Fn.

Please fix this security bug.

Version-Release number of selected component (if applicable):
gnome-shell-2.91.6-6.fc15

How reproducible:
every time

Steps to Reproduce:
1. Create two users and login as one to Gnome Shell
2. Use [user menu]->Switch User to login as the other user
3. Hit CTRL-ALT-F1 to switch back to the first user
4. Hit CTRL-ALT-F7 to switch back to the second user
  
Actual results:
switch users with no password

Expected results:
screens are locked when you switch away

Additional info:

Comment 1 Jeff Bastian 2011-02-24 19:46:00 UTC
This sounds very similar to bug 680065, just triggered in a different way.  I'll mark this as a duplicate.

*** This bug has been marked as a duplicate of bug 680065 ***