Bug 1062933 - Security Alert! You can gain user control once you wake up from hibernation!
Summary: Security Alert! You can gain user control once you wake up from hibernation!
Keywords:
Status: CLOSED DUPLICATE of bug 1061148
Alias: None
Product: Fedora
Classification: Fedora
Component: gnome-shell
Version: 20
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Owen Taylor
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2014-02-08 21:37 UTC by Ali Akcaagac
Modified: 2014-02-11 22:26 UTC (History)
5 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2014-02-11 21:31:49 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Ali Akcaagac 2014-02-08 21:37:24 UTC
I opened a bugreport a couple of days ago because I assumed it to a GDM cause. Sadly no response, so it also could be a gnome-shell issue.

https://bugzilla.redhat.com/show_bug.cgi?id=1061148

;--- Report

I found a serious security issue which is reproducible everytime here with Fedora 20.

Open gnome-terminal and make it fullscreen (F11)

tar xfjv some big file (say 1gb or something like that).

Under heavy harddrive load go and lock your screen under GNOME.

You get into the "Shield" of GDM (or gnome shell) where you can enter your password, make volume higher or lower and so on.

Now close the lid of your notebook so everything goes into hibernation.

Open your lid of your notebook and press "power" to get the machine out of hibernation again.

Voila you are inside your gnome-session. No password required, you can do whatever you want.

Now imagine you leave your notebook for a coffee break or going to the toilet. Someone could come up and grab your work from your notebook.

Comment 1 Vincent Danen 2014-02-11 21:31:49 UTC
You don't need to open two bug reports for the same issue.

*** This bug has been marked as a duplicate of bug 1061148 ***

Comment 2 Ali Akcaagac 2014-02-11 22:26:04 UTC
I am not sure whether this is indeed gdm related or gnome-shell related. It depends what of both provides this sliding "shield" kind of thing.


Note You need to log in before you can comment on or make changes to this bug.