https://bugzilla.redhat.com/show_bug.cgi?id=1013789
Bug ID: 1013789 Summary: ibus-mozc must be locked down while screen is locked Product: Fedora Version: rawhide Component: mozc Assignee: tagoh@redhat.com Reporter: yukawa@google.com QA Contact: extras-qa@fedoraproject.org CC: i18n-bugs@lists.fedoraproject.org, tagoh@redhat.com
Description of problem: Anyone can use ibus-mozc on the Gnome Shell's locked screen, meaning that an arbitrary person is able to do the following things while you are away from your desk. - See your private information as conversion candidates that come from your user dictionary entry and/or input history. - Update your input history. - Change config settings via "Command" feature.
Version-Release number of selected component (if applicable): ibus-mozc.x86_64 1.11.1522.102-2.fc21 ibus.x86_64 1.5.4-1.fc21 ibus-gtk2.x86_64 1.5.4-1.fc21 ibus-gtk3.x86_64 1.5.4-1.fc21 gnome-shell.x86_64 3.10.0.1-1.fc21
How reproducible: 100%
Steps to Reproduce: 1. Log in to Gnome 2. Add ibus-mozc into the active keyboard list 3. Lock screen from the Gnome Shell menu 4. Hit Hankaku/Zenkaku key to turn on ibus-mozc on the password field.
Actual results: Anyone can use ibus-mozc that is running under the user's context after step 4.
Expected results: ibus-mozc is disabled after step 4.
Additional info: Here is a quick and initial patch for ibus-mozc 1.11.1522.102. https://code.google.com/p/mozc/issues/detail?id=199#c1