By default, Bugzilla does not search the list of RESOLVED bugs.
You can force it to do so by putting the upper-case word ALL in front of your search query, e.g.: ALL tdelibs
We recommend searching for bugs this way, as you may discover that your bug has already been resolved and fixed in a later release.

Bug 2652

Summary:	Switch User auto-logs previous "Switch User" session and claims new F* terminal
Product:	TDE	Reporter:	Kristopher <gamrat.kristopher>
Component:	tdebase	Assignee:	Timothy Pearson <kb9vqf>
Status:	NEEDINFO ---
Severity:	critical	CC:	bugwatch, michele.calgaro, slavek.banko
Priority:	P5
Version:	R14.0.x [Trinity]
Hardware:	Other
OS:	Linux
Compiler Version:		TDE Version String:
Application Version:		Application Name:

Description Kristopher 2016-05-13 21:33:24 CDT

NOTE: Can we add R14.0.3 and Debian Jessie to the bug tracker so we don't have to keep adding these annoying notes?

When selecting TMenu -> Switch User -> Start New Session for the first time since booting my computer, I get the login screen and can switch to it with CTRL+ALT+F8. If I log out the new session then later attempt to start a new one, a new terminal (F9) is claimed instead of the original (and now unoccupied) F8 terminal and the user that was originally logged in to the F8 terminal is automatically logged in to the F9 terminal without requiring the login screen or a password. Each time logging out the session then starting a new one seems to occupy a new terminal with the same user as before, until I find myself consistently being logged in to the F12 terminal with the previous user.

I am using TDM as the login manager, and it seems to make no difference whether or not SAK is enabled.

This presents a rather obvious security risk because if a user logs in once via the Switch User function, anyone else with physical access to the machine being used can subsequently access that person's data without a password.

Rebooting the machine seems to reset the new session to F8 with the login screen being displayed, but the bug will still occur if the new session is used.

Comment 1 Michele Calgaro 2018-08-04 08:40:10 CDT

I can't reproduce this at all.
I followed the described steps. F8 terminal is correctly reused and the login screen correctly displayed.
Is this still valid?