Created attachment 328732 [details] patch based on upstream code Description of problem: "When a user attempts to unlock the screen, the gnome-screensaver session daemon spawns gnome-screensaver-dialog to authenticate the user. On systems where shadow passwords are in use, and on which PAM (which it is assumed can check passwords without elevated privileges), the dialog is setuid. For the sake of these cases, gnome-screensaver starts the dialog with only a handful of variables copied from the user's environment (PATH, SESSION_MANAGER, XAUTHORITY, XAUTHLOCALHOSTNAME, LANG, LANGUAGE). While this does nothing to prevent the user from doing the same thing and attempting to exploit any bugs which might be present in a setuid installation of gnome-screensaver-dialog, it also penalizes the non-setuid case by breaking themes and any other user-interface customizations which are specified through the environment." Additional info:
dev_ack+ patch is available
This request was evaluated by Red Hat Product Management for inclusion, but this component is not scheduled to be updated in the current Red Hat Enterprise Linux release. If you would like this request to be reviewed for the next minor release, ask your support representative to set the next rhel-x.y flag to "?".
This request was evaluated by Red Hat Product Management for inclusion in the current release of Red Hat Enterprise Linux. Because the affected component is not scheduled to be updated in the current release, Red Hat is unfortunately unable to address this request at this time. Red Hat invites you to ask your support representative to propose this request, if appropriate and relevant, in the next release of Red Hat Enterprise Linux.
This request was evaluated by Red Hat Product Management for inclusion in a Red Hat Enterprise Linux release. Product Management has requested further review of this request by Red Hat Engineering, for potential inclusion in a Red Hat Enterprise Linux release for currently deployed products. This request is not yet committed for inclusion in a release.
Development Management has reviewed and declined this request. You may appeal this decision by reopening this request.