FW: F7 T2 Security Leak?

Jesse Keating jkeating at redhat.com
Sun Mar 4 21:18:08 UTC 2007


On Sunday 04 March 2007 12:10:13 Michaël Vanderheeren wrote:
> There are 2 accounts on a computer, call them A and B. Each account has
> it's own different password.
>
> Person A starts up the computer and logs in. But at a certain point person
> B wants to use his account for 5 minutes. So he uses the Fast User Switch.
> As this happens person A's account stays active. But… person B can switch
> back to person A's account without entering a password! So if person A is
> gone for a while, person B can steal his documents, delete files, …

Fast User Switching by default enables the screen lock when a user is switched 
away from.  Could there be a problem with your screen lock?

Please keep in mind that any assumption of security is completely out of the 
water if folks have physical access to your computer, which they must have 
for fast user switching.

-- 
Jesse Keating
Release Engineer: Fedora
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-devel-list/attachments/20070304/d49f9f97/attachment.sig>


More information about the fedora-devel-list mailing list