Bug 407767 - It is possible to switch back and forth unlocked user sessions via TTY
Summary: It is possible to switch back and forth unlocked user sessions via TTY
Status: RESOLVED INTENTIONAL
Alias: None
Product: kscreenlocker
Classification: Plasma
Component: general (show other bugs)
Version: unspecified
Platform: openSUSE Linux
: NOR normal
Target Milestone: ---
Assignee: Plasma Bugs List
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2019-05-20 14:25 UTC by Nikolai
Modified: 2020-01-13 14:03 UTC (History)
3 users (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Nikolai 2019-05-20 14:25:30 UTC
SUMMARY

From "user switcher" widget i activate few new user sessions. Of course previous user sessions are locked.
But if i start switching user session via TTY i can switch without "logging in".

STEPS TO REPRODUCE
1. Create few users on your desktop (i will use USER1 and USER2 in this example)
2. Login as USER1
3. Via widget switch to USER2
4. Switch back to USER1 from widget you will require to enter password to unlock USER1 session.
5. Now being in USER1 session (without locking it) switch to USER2 session using TTY.
6. USER2 session was locked because you previously have switched to USER1 using widget
7. Login in USER2 session.
8. Now, via TTY switch back to USER1 session... it is unlocked. You can go back and forth between session using TTY without entering the password.

OBSERVED RESULT
You can go back and forth between session using TTY without entering the password.

EXPECTED RESULT
When switching sessions via widget or otherwise all other sessions must be locked.


SOFTWARE/OS VERSIONS
Linux/KDE Plasma: openSUSE tumbleweed
KDE Plasma Version: 5.15.5
KDE Frameworks Version: 5.57.0
Qt Version: 5.013-1

ADDITIONAL INFORMATION
Comment 1 Nate Graham 2020-01-12 23:34:01 UTC
Can you reproduce this issue in Plasma 5.17? I cannot.
Comment 2 Kishore Gopalakrishnan 2020-01-13 13:29:52 UTC
(In reply to Nate Graham from comment #1)
> Can you reproduce this issue in Plasma 5.17? I cannot.

I can reproduce this with Plasma 5.17.5, frameworks 5.65, and Qt 5.14. This is on Arch Linux. With two sessions open, switching via krunner locks the session switching was done from, but if I switch using Ctrl+Alt+F?, the session does not get locked
Comment 3 Nate Graham 2020-01-13 14:03:05 UTC
Well I think that's sort of by design. If you switch between sessions via the TTY switcher like this, it's up to you to manually lock them.