Bug#737396: kscreensaver: locked screen allows any password if a third session (vt9) is also active
On Thu, Jun 05, 2014 at 10:52:54AM +0200, Lajos Mester wrote:
> I tried to log in a diffrerent order, and came out, that it wasn't the number
> of the VT-s, but allways the same user who got logged in without a valid
> password.
>
> I have no idea why this happened. And I'm unable to reproduce it any more: I
> changed the password of that user, and it seems to be OK. Now only with a
> (valid) password is the login in possible.
>
> I would like to know, what could got corrupted, or hijacked. Could you please
> give me advice?
>
> Thanks
Try looking at the contents of /var/log/auth* as any PAM errors
should be logged there. Alternatively you may want to ask on
https://lists.debian.org/debian-user/
As this does not look to be a problem with KDE please could you also
close the bugs you have raised in Debian and KDE.
http://www.debian.org/Bugs/Developer#closing
https://bugs.kde.org/show_bug.cgi?id=330526
--
Jim Scadden
Reply to: