Bug#721388: gdm3: anyone can change the user's next session

[Vincent Lefevre]

On 2013-09-09 17:26:30 +0200, Laurent Bigonville wrote:
> So if I understood correctly:
> 
> 1) A "rogue" user has selected your user in the list and then changed
>    your session to something else.
> 2) When you arrived in front of the screen you saw that your user was
>    already selected and then you just typed your password
> 3) You were logged in using the wrong session.
> 
> Is that correct?

I think that I cancelled first by typing Enter (i.e. an incorrect
password).

But, FYI, my user is selected by default as this is the only user
of the machine.

-- 
Vincent Lefèvre <vincent at vinc17.net> - Web: <http://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <http://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)