[Bug 726969] New: Prevent halting/restarting from gdm when switching users
https://bugzilla.novell.com/show_bug.cgi?id=726969 https://bugzilla.novell.com/show_bug.cgi?id=726969#c0 Summary: Prevent halting/restarting from gdm when switching users Classification: openSUSE Product: openSUSE 12.1 Version: RC 1 Platform: x86-64 OS/Version: SuSE Other Status: NEW Severity: Major Priority: P5 - None Component: GNOME AssignedTo: bnc-team-gnome@forge.provo.novell.com ReportedBy: badshah400@gmail.com QAContact: qa@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:7.0.1) Gecko/20100101 Firefox/7.0.1 At present the situation is that if an user A locks his session, anyone else (say user X who also has physical access to the computer) can still opt to "switch user", go to the gdm login screen, and then, from there choose to halt/restart the system without so much as a warning about another session running in the background. This is a big inadequacy in my opinion and perhaps also a security risk. I suggest that the halt/restart buttons be disabled completely and not shown on the gdm shell when it is presented to a user upon choosing to "switch user" while another user session is logged in. Halt/Restart "works" from the gdm screen even if multiple users are logged in. Related upstream bug: https://bugzilla.gnome.org/show_bug.cgi?id=662813 Reproducible: Always Steps to Reproduce: 1.Log in as an user 2.Lock screen 3.Select Switch User from the locked screen to reach gdm login screen 4.Select restart/halt Actual Results: System halts/restarts even when another user session is in progress (and locked) Expected Results: Halting/restarting from the login screen should not be allowed when a user is logged in and has his session locked. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=726969 https://bugzilla.novell.com/show_bug.cgi?id=726969#c1 Ludwig Nussel <lnussel@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|bnc-team-gnome@forge.provo. |vuntz@suse.com |novell.com | --- Comment #1 from Ludwig Nussel <lnussel@suse.com> 2011-10-28 09:15:57 CEST --- Well, if you are on the physical console you typically also have access to the power button or power cord. So if the system annoys you with password prompts when trying to shut down you simply can force the system off the hard way. You can also switch consoles and press ctrl-alt-del to reboot any time without authentication. Therefore my opinion on the matter is that restricting shut down for the local console doesn't make sense by default. However, it would be nice if gdm could warn that there are still other users logged in and offer not not shut down. That way prevents accidental shutdowns but does not hinder you to shut down the machine if you really need to. Reassigning to gdm maintainer. [I noticed an inconsistency between consolekit and logind privileges though, will adjust logind privileges to also allow shutdown for multiple sessions] -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=726969 https://bugzilla.novell.com/show_bug.cgi?id=726969#c Ludwig Nussel <lnussel@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Severity|Major |Enhancement -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=726969 https://bugzilla.novell.com/show_bug.cgi?id=726969#c2 --- Comment #2 from Bernhard Wiedemann <bwiedemann@suse.com> 2011-10-28 10:00:30 CEST --- This is an autogenerated message for OBS integration: This bug (726969) was mentioned in https://build.opensuse.org/request/show/89613 Factory / polkit-default-privs -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=726969 https://bugzilla.novell.com/show_bug.cgi?id=726969#c3 Atri Bhattacharya <badshah400@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |k.rautavuori@gmail.com --- Comment #3 from Atri Bhattacharya <badshah400@gmail.com> 2012-06-30 14:19:40 UTC --- *** Bug 739680 has been marked as a duplicate of this bug. *** http://bugzilla.novell.com/show_bug.cgi?id=739680 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=726969 https://bugzilla.novell.com/show_bug.cgi?id=726969#c4 Atri Bhattacharya <badshah400@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Component|GNOME |GNOME Version|RC 1 |Beta 2 InfoProvider| |vuntz@suse.com AssignedTo|vuntz@suse.com |bnc-team-gnome@forge.provo. | |novell.com Product|openSUSE 12.1 |openSUSE 12.2 --- Comment #4 from Atri Bhattacharya <badshah400@gmail.com> 2012-06-30 14:22:24 UTC --- Obviously cannot be fixed for openSUSE 12.1 by online updates, I guess (would be too big a change), but I hope something could be done for openSUSE 12.2 to show a warning abt other users being logged in, as Ludwig suggests? His seems like a great idea. Moving to openSUSE 12.2 and needinfo'ing Vincent (again, sorry) ;) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=726969 https://bugzilla.novell.com/show_bug.cgi?id=726969#c5 Vincent Untz <vuntz@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW InfoProvider|vuntz@suse.com | --- Comment #5 from Vincent Untz <vuntz@suse.com> 2012-07-02 07:24:43 UTC --- I don't have any suggestion for this. To me, this is really an upstream bug. What we can do in openSUSE is to make sure the policies for halt/restart when there are more than one logged in users require a password, I guess. But that's all until upstream does something a bit more elaborate (and you already filed the bug for this upstream). -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=726969 https://bugzilla.novell.com/show_bug.cgi?id=726969#c6 Bjørn Lie <zaitor@opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |zaitor@opensuse.org See Also| |https://bugzilla.gnome.org/ | |show_bug.cgi?id=662813 Summary|Prevent halting/restarting |[12.3] Prevent |from gdm when switching |halting/restarting from gdm |users |when switching users --- Comment #6 from Bjørn Lie <zaitor@opensuse.org> 2012-07-18 21:34:23 CEST --- There will not be anything more we can do with this one for 12.2, so moving/tagging for 12.3 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=726969 https://bugzilla.novell.com/show_bug.cgi?id=726969#c7 Dominique Leuenberger <dimstar@opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Component|GNOME |GNOME Version|Beta 2 |Factory Product|openSUSE 12.2 |openSUSE 12.3 Target Milestone|--- |Factory --- Comment #7 from Dominique Leuenberger <dimstar@opensuse.org> 2012-09-02 19:00:54 UTC --- Sorry for the spam: moving bugs that were tagged for 12.3 over to 12.3. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=726969 https://bugzilla.novell.com/show_bug.cgi?id=726969#c8 Vincent Untz <vuntz@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Component|GNOME |GNOME Version|Factory |12.3 Milestone 0 Product|openSUSE 12.3 |openSUSE Factory Target Milestone|Factory |--- --- Comment #8 from Vincent Untz <vuntz@suse.com> 2012-09-13 06:39:11 UTC --- Sorry for the noise, mass-moving GNOME bugs from openSUSE 12.3 product to the new openSUSE Factory product. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=726969 https://bugzilla.novell.com/show_bug.cgi?id=726969#c9 Bjørn Lie <zaitor@opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED --- Comment #9 from Bjørn Lie <zaitor@opensuse.org> 2013-01-13 18:36:20 CET --- This is kind of fixed for 12.3 -- on new installations, that do not get consolekit installed by default. When ConsoleKit is not present, users are met with a admin password req when trying to shut down when other users are logged in. So marking this as fixed/resolved -- feel free to reopen if you disagree. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=726969 https://bugzilla.novell.com/show_bug.cgi?id=726969#c10 Ludwig Nussel <lnussel@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|FIXED | --- Comment #10 from Ludwig Nussel <lnussel@suse.com> 2013-01-14 09:21:01 CET --- as I explained in comment #1 the password prompt only annoying. A warning would be sufficient. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=726969 https://bugzilla.novell.com/show_bug.cgi?id=726969#c11 Bjørn Lie <zaitor@opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED Resolution| |FIXED --- Comment #11 from Bjørn Lie <zaitor@opensuse.org> 2013-09-28 11:58:43 CEST --- I only get the warning now in 13.1 beta, closing as fixed. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com