Ubuntu
fast-user-switch-applet package

guest-login able to view contents of filesystem

Asked by Tuomas Aavikko

I was under impression that when logged in as guest, you shouldn't be able to view contents of users folders... (e.q) /home/xxx/Documents/

Now you can view the contents of folders, and view media files.
Shouldn't these be forbidden actions for a guest?

Question information

Language:
English Edit question
Status:
Solved
For:
Ubuntu fast-user-switch-applet Edit question
Assignee:
No assignee Edit question
Solved by:
Tuomas Aavikko
Solved:
Last query:
Last reply:
Revision history for this message
jami (jmsa) said : 		#1

if user qqq can read files owned by user xxx
a) check permissions of /home/xxx, try 'man chmod'
b) check entries in /etc/passwd and /etc/group

Revision history for this message
Bruce Cowan (bruce89-deactivatedaccount) said : 		#2

All home folders are readable by anyone.

Revision history for this message
Tuomas Aavikko (taavikko) said : 		#3

Quote from Bruce Cowan: All home folders are readable by anyone.

So whats the purpose of using guest-session.
I could just hand my notebook to everyone, who needs to check their email etc.
Few weeks ago, I couldn't see contents of my own users folders, but that was broken(fixed)
by some update.

Fast-users-switch and guest-session could benefit from added security.
I personally can't think any scenario, where I would want even a friend to have a look-see of my personal content.

Revision history for this message
Tuomas Aavikko (taavikko) said : 		#4

http://www.ubuntu.com/testing/intrepid/beta#New%20Features%20since%20Ubuntu%208.04

Guest session

The User Switcher panel applet (package fast-user-switch-applet) now provides an extra entry for starting a Guest session (by Martin Pitt). This creates a temporary password-less user account with restricted privileges: the account cannot access any users' home directories, nor permanently store data. This is sufficiently safe to lend your laptop to someone else for a quick email check.

I just tested again on fully up-to-date intrepid.
I could access my main user homefolder and files, Bug?

Revision history for this message
Tuomas Aavikko (taavikko) said : 		#5

Problem solved, there is a bug https://bugs.launchpad.net/ubuntu/+source/gdm-guest-session/+bug/269921