Activity log for bug #1308850

Date Who What changed Old value New value Message
2014-04-17 04:59:50 Giovanni Mellini bug added bug
2014-04-17 04:59:50 Giovanni Mellini attachment added unity_problem_dash_locksreen.jpg https://bugs.launchpad.net/bugs/1308850/+attachment/4085917/+files/unity_problem_dash_locksreen.jpg
2014-04-17 05:11:51 Giovanni Mellini attachment added same problem with dash fullscreen https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1308850/+attachment/4085919/+files/unity_problem_dash-fulscreen_locksreen.jpg
2014-04-17 09:50:19 Andrea Azzarone bug task added unity
2014-04-17 09:50:30 Andrea Azzarone unity: importance Undecided High
2014-04-17 09:50:33 Andrea Azzarone unity: status New Triaged
2014-04-17 09:50:39 Andrea Azzarone unity: milestone 7.2.1
2014-04-17 09:57:00 Andrea Azzarone unity (Ubuntu): status New Confirmed
2014-04-17 09:59:02 Andrea Azzarone tags lockscreen
2014-04-17 10:11:40 Andrea Azzarone unity: status Triaged In Progress
2014-04-17 10:11:43 Andrea Azzarone unity (Ubuntu): status Confirmed In Progress
2014-04-17 10:11:47 Andrea Azzarone unity: assignee Andrea Azzarone (andyrock)
2014-04-17 10:11:50 Andrea Azzarone unity (Ubuntu): assignee Andrea Azzarone (andyrock)
2014-04-17 10:24:26 Andrea Azzarone branch linked lp:~andyrock/unity/fix-1308850
2014-04-23 13:48:20 Stephen M. Webb description This is 100% reproducible on my side with an updated 14.04 I have a laptop that after 3 minutes of inactivity shutdown the screen and lock-it. If I press the SUPER button to activate the dash and then I wait 3 minutes for auto screen locking the screen become black. After that when I move the mouse to go to lockscreen and unlock my session, I see the dash on top of the lockscreen. I can digit my password and unlock the laptop pressing enter but I cannot see the username, box, dots etc I think that the screenshot attached explain very whell what I'm writing. I think that this is a security problem because as you can see from my screenshot other people can see my personal data (file and folders) without authorization. Giovanni This is 100% reproducible on my side with an updated 14.04 I have a laptop that after 3 minutes of inactivity shutdown the screen and lock-it. If I press the SUPER button to activate the dash and then I wait 3 minutes for auto screen locking the screen become black. After that when I move the mouse to go to lockscreen and unlock my session, I see the dash on top of the lockscreen. I can digit my password and unlock the laptop pressing enter but I cannot see the username, box, dots etc I think that the screenshot attached explain very whell what I'm writing. I think that this is a security problem because as you can see from my screenshot other people can see my personal data (file and folders) without authorization. [Test Case] (1) Make sure the screen lock is enabled and has a reasonable timeout set. (2) Use the Super button to activate the Dash. (3) Wait for the screen lock timeout so the lockscreen / screensaver comes up. (4) Move the mouse or press a shift key to display the lockscreen. (5) The Dash should not appear on top of the lockscreen. [Regression Potential] None. The fix is to explicitly undisplay the dash when the screen is locked.
2014-04-23 13:52:34 Łukasz Zemczak nominated for series Ubuntu Trusty
2014-04-23 14:07:33 Łukasz Zemczak bug added subscriber Ubuntu Stable Release Updates Team
2014-04-25 14:35:02 Chris J Arges bug task added unity (Ubuntu Trusty)
2014-04-25 14:35:24 Chris J Arges description This is 100% reproducible on my side with an updated 14.04 I have a laptop that after 3 minutes of inactivity shutdown the screen and lock-it. If I press the SUPER button to activate the dash and then I wait 3 minutes for auto screen locking the screen become black. After that when I move the mouse to go to lockscreen and unlock my session, I see the dash on top of the lockscreen. I can digit my password and unlock the laptop pressing enter but I cannot see the username, box, dots etc I think that the screenshot attached explain very whell what I'm writing. I think that this is a security problem because as you can see from my screenshot other people can see my personal data (file and folders) without authorization. [Test Case] (1) Make sure the screen lock is enabled and has a reasonable timeout set. (2) Use the Super button to activate the Dash. (3) Wait for the screen lock timeout so the lockscreen / screensaver comes up. (4) Move the mouse or press a shift key to display the lockscreen. (5) The Dash should not appear on top of the lockscreen. [Regression Potential] None. The fix is to explicitly undisplay the dash when the screen is locked. [Impact] This is 100% reproducible on my side with an updated 14.04 I have a laptop that after 3 minutes of inactivity shutdown the screen and lock-it. If I press the SUPER button to activate the dash and then I wait 3 minutes for auto screen locking the screen become black. After that when I move the mouse to go to lockscreen and unlock my session, I see the dash on top of the lockscreen. I can digit my password and unlock the laptop pressing enter but I cannot see the username, box, dots etc I think that the screenshot attached explain very whell what I'm writing. I think that this is a security problem because as you can see from my screenshot other people can see my personal data (file and folders) without authorization. [Test Case] (1) Make sure the screen lock is enabled and has a reasonable timeout set. (2) Use the Super button to activate the Dash. (3) Wait for the screen lock timeout so the lockscreen / screensaver comes up. (4) Move the mouse or press a shift key to display the lockscreen. (5) The Dash should not appear on top of the lockscreen. [Regression Potential] None. The fix is to explicitly undisplay the dash when the screen is locked.
2014-04-28 10:49:20 Marco Trevisan (Treviño) unity: status In Progress Fix Committed
2014-04-29 05:30:09 Timo Jyrinki tags lockscreen lockscreen verification-needed
2014-04-29 05:55:03 Launchpad Janitor unity (Ubuntu Trusty): status New Confirmed
2014-04-29 12:20:03 Christopher Townsend tags lockscreen verification-needed lockscreen verification-done
2014-04-29 12:27:55 Marc Deslauriers unity (Ubuntu Trusty): status Confirmed Fix Released
2014-04-30 09:34:00 Launchpad Janitor unity (Ubuntu): status In Progress Fix Released
2014-06-04 14:45:40 Stephen M. Webb unity: status Fix Committed Fix Released