Modify

Ticket #2376 (closed defect: fixed)

Opened 3 years ago

Last modified 3 years ago

Server suspends to tty1 - showing password in clear text!!!

Reported by: frank_claessen Owned by: jacalvo@…
Milestone: Component: base
Severity: major Keywords: tty1 suspend password
Cc:

Description

Running Zentyal 2.0-1

After a short period of inactivity at the graphical display - looking at the dashbord f.e. - the screen goes black and shows tty1. At the server login line the password is shown in clear text.

Switching back with CTRL-ALT-F7 show a black screen and every keyboard button touched only delivers gibberish on the screen. System has to be restarted, noting else works.

In the forum the same problem can be found by user mac9 while beta-testing.

Attachments

Change History

comment:1 Changed 3 years ago by frank_claessen

  • priority changed from normal to high
  • Severity changed from normal to major

After having experienced this several times it appears that the whole keyboard buffers is being emptied. Even a message like this one shows up on the screen.

I a setting the priority of this bug to high and the severity to major since it compromises the security of the server showing the password of the logged in user, normally speaking the administrator.

Cheers Frank

comment:2 Changed 3 years ago by jacalvo@…

  • Owner changed from jacalvo@… to jacalvo@…

comment:3 Changed 3 years ago by jacalvo@…

  • Status changed from new to closed
  • Resolution set to fixed

This is a bug with slim, the session manager included, not in the zentyal software. In the next installer (2.0-3), that will be released very soon, we are going to include another replacement by default: lxdm.

You can switch it with:

sudo apt-get install lxdm sudo apt-get remove slim

comment:4 Changed 3 years ago by jacalvo@…

Sorry the commands are not too clear in my previous comment

sudo apt-get install lxdm
sudo apt-get remove slim
View

Add a comment

Modify Ticket

Change Properties
<Author field>
Action
as closed
The resolution will be deleted. Next status will be 'reopened'
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.