lp:lightdm

Branch merges

6 branches proposed for merging into this one.

Propose for merging

Related source package recipes

3 recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #577919: chromium-browser fails to start (guest account, OpenVZ): "Failed to move to new PID namespace: Operation not permitted"	Low	Confirmed
Bug #924224: LightDM package fails to remove if lightdm user is in use	Medium	Triaged
Bug #960157: lightdm exits on SIGHUP	Medium	Fix Committed
Bug #1027760: utmp records do not have X display address in host field	Wishlist	Triaged
Bug #1380364: lightdm writes XDISPLAY instead of tty device name to utmp record	Undecided	New
Bug #1390808: VNC / XDMCP server cannot be configured to listen on specific interfaces	Wishlist	Triaged
Bug #1449282: xserver-allow-tcp=true feature doesn't work with Xorg version 1.17.0	Low	Fix Committed
Bug #1470587: dm-tool manpage has a typo	Low	Fix Committed
Bug #1481561: Connect to XDMCP clients on address requests come from if available	Medium	Fix Committed
Bug #1484083: Don't work autologin after update lightdm	High	Confirmed
Bug #1507033: lightdm.conf boolean values false if have trailing whitespace	Medium	Fix Committed
Bug #1511259: Session child does not inherit all LC_* variables	Medium	Fix Committed
Bug #1511545: Implement XDMCP ForwardQuery	Medium	Fix Committed
Bug #1517685: XDMCP server starts without authentication if configured key does not exist	Medium	Confirmed
Bug #1578442: XDMCP Willing/Unwilling messages do not report hostname	Medium	Fix Committed
Bug #1579867: lightdm set SIGPIPE disposition to SIG_IGN even for children	Medium	Fix Committed
Bug #1631707: Missing suspend and hibernate functionality for non-systemd systems with upower 0.99.0 =>	High	Fix Committed
Bug #1648637: handle interruped read and write calls	High	Fix Committed
Bug #1656399: Returning to existing session is unreliable and can leave on blank screen	High	Fix Committed
Bug #1663157: Guest session processes are not confined in 16.10 and newer releases	Undecided	New

Link a bug report

Related blueprints

2484. By Launchpad Translations on behalf of lightdm-team on 2017-05-19

Launchpad automatic translations update.

2483. By Robert Ancell on 2017-05-11

* New upstream release:
  - TBD
* SECURITY UPDATE: Guest session not confined (LP: #1663157)
  - debian/50-disable-guest.conf:
  - debian/lightdm.install:
    - Disable guest sessions by default, this can be overridden by custom
      configuration (e.g. /etc/lightdm/lightdm.conf)
  - CVE-2017-8900

2482. By Launchpad Translations on behalf of lightdm-team on 2017-04-28

Launchpad automatic translations update.

2481. By Robert Ancell on 2017-04-21

Update debian/changelog to what has been released

2480. By Robert Ancell on 2017-04-21

Explicitly set file mode when creating guest home directory

Merged branch lp:~tyhicks/lightdm/guest-dir-perms

2479. By Launchpad Translations on behalf of lightdm-team on 2017-04-05

Launchpad automatic translations update.

2478. By Tyler Hicks on 2017-04-04

Detect existing malicious guest user home dirs

It was discovered that a local attacker could watch for lightdm's
guest-account script to create a /tmp/guest-XXXXXX file and then quickly
create the lowercase representation of the guest user's home directory
before lightdm could. This allowed the attacker to have control of the
guest user's home directory and, subsequently, gain control of an
arbitrary directory in the filesystem which could lead to privilege
escalation.

This patch fixes the issue by detecting failures in creating a directory
for the guest user's home directory. If the file (directory, symlink,
etc.) already exists at the path, mkdir will fail and the script will
exit. This means that it is still possible for a local user to carry out
a denial of service on the guest user login feature.

2477. By Launchpad Translations on behalf of lightdm-team on 2017-03-22

Launchpad automatic translations update.

2476. By Robert Ancell on 2017-03-22

Releasing 1.22.0

2475. By Robert Ancell on 2017-03-13

Allow guest sessions to talk to Mir (allowing unity8)

Merged branch lp:~mterry/lightdm/guest-permissions

Bug #1644237: unity8 fails to start as guest user