lp:lightdm

Created by Robert Ancell on 2010-12-02 and last modified on 2017-05-19
Get this branch:
bzr branch lp:lightdm
Members of LightDM Development Team can upload to this branch. Log in for directions.

Branch merges

Related bugs

Related blueprints

Branch information

Owner:
LightDM Development Team
Project:
Light Display Manager
Status:
Mature

Recent revisions

2484. By Launchpad Translations on behalf of lightdm-team on 2017-05-19

Launchpad automatic translations update.

2483. By Robert Ancell on 2017-05-11

* New upstream release:
  - TBD
* SECURITY UPDATE: Guest session not confined (LP: #1663157)
  - debian/50-disable-guest.conf:
  - debian/lightdm.install:
    - Disable guest sessions by default, this can be overridden by custom
      configuration (e.g. /etc/lightdm/lightdm.conf)
  - CVE-2017-8900

2482. By Launchpad Translations on behalf of lightdm-team on 2017-04-28

Launchpad automatic translations update.

2481. By Robert Ancell on 2017-04-21

Update debian/changelog to what has been released

2480. By Robert Ancell on 2017-04-21

Explicitly set file mode when creating guest home directory

2479. By Launchpad Translations on behalf of lightdm-team on 2017-04-05

Launchpad automatic translations update.

2478. By Tyler Hicks on 2017-04-04

Detect existing malicious guest user home dirs

It was discovered that a local attacker could watch for lightdm's
guest-account script to create a /tmp/guest-XXXXXX file and then quickly
create the lowercase representation of the guest user's home directory
before lightdm could. This allowed the attacker to have control of the
guest user's home directory and, subsequently, gain control of an
arbitrary directory in the filesystem which could lead to privilege
escalation.

This patch fixes the issue by detecting failures in creating a directory
for the guest user's home directory. If the file (directory, symlink,
etc.) already exists at the path, mkdir will fail and the script will
exit. This means that it is still possible for a local user to carry out
a denial of service on the guest user login feature.

2477. By Launchpad Translations on behalf of lightdm-team on 2017-03-22

Launchpad automatic translations update.

2476. By Robert Ancell on 2017-03-22

Releasing 1.22.0

2475. By Robert Ancell on 2017-03-13

Allow guest sessions to talk to Mir (allowing unity8)

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)

Automatic translations commits

This branch contains Public information 
Everyone can see this information.