https://bugzilla.redhat.com/show_bug.cgi?id=1013789
Bug ID: 1013789 Summary: ibus-mozc must be locked down while screen is locked Product: Fedora Version: rawhide Component: mozc Assignee: tagoh@redhat.com Reporter: yukawa@google.com QA Contact: extras-qa@fedoraproject.org CC: i18n-bugs@lists.fedoraproject.org, tagoh@redhat.com
Description of problem: Anyone can use ibus-mozc on the Gnome Shell's locked screen, meaning that an arbitrary person is able to do the following things while you are away from your desk. - See your private information as conversion candidates that come from your user dictionary entry and/or input history. - Update your input history. - Change config settings via "Command" feature.
Version-Release number of selected component (if applicable): ibus-mozc.x86_64 1.11.1522.102-2.fc21 ibus.x86_64 1.5.4-1.fc21 ibus-gtk2.x86_64 1.5.4-1.fc21 ibus-gtk3.x86_64 1.5.4-1.fc21 gnome-shell.x86_64 3.10.0.1-1.fc21
How reproducible: 100%
Steps to Reproduce: 1. Log in to Gnome 2. Add ibus-mozc into the active keyboard list 3. Lock screen from the Gnome Shell menu 4. Hit Hankaku/Zenkaku key to turn on ibus-mozc on the password field.
Actual results: Anyone can use ibus-mozc that is running under the user's context after step 4.
Expected results: ibus-mozc is disabled after step 4.
Additional info: Here is a quick and initial patch for ibus-mozc 1.11.1522.102. https://code.google.com/p/mozc/issues/detail?id=199#c1
https://bugzilla.redhat.com/show_bug.cgi?id=1013789
Fedora Update System updates@fedoraproject.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |MODIFIED
https://bugzilla.redhat.com/show_bug.cgi?id=1013789
--- Comment #1 from Fedora Update System updates@fedoraproject.org --- mozc-1.11.1522.102-3.fc19 has been submitted as an update for Fedora 19. https://admin.fedoraproject.org/updates/mozc-1.11.1522.102-3.fc19
https://bugzilla.redhat.com/show_bug.cgi?id=1013789
Fedora Update System updates@fedoraproject.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|MODIFIED |ON_QA
--- Comment #2 from Fedora Update System updates@fedoraproject.org --- Package mozc-1.11.1522.102-3.fc19: * should fix your issue, * was pushed to the Fedora 19 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing mozc-1.11.1522.102-3.fc19' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2013-18600/mozc-1.11.1522.102... then log in and leave karma (feedback).
https://bugzilla.redhat.com/show_bug.cgi?id=1013789
--- Comment #3 from Fedora Update System updates@fedoraproject.org --- mozc-1.11.1522.102-3.fc20 has been submitted as an update for Fedora 20. https://admin.fedoraproject.org/updates/mozc-1.11.1522.102-3.fc20
https://bugzilla.redhat.com/show_bug.cgi?id=1013789
Fedora Update System updates@fedoraproject.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|ON_QA |CLOSED Fixed In Version| |mozc-1.11.1522.102-3.fc19 Resolution|--- |ERRATA Last Closed| |2013-10-19 05:06:23
--- Comment #4 from Fedora Update System updates@fedoraproject.org --- mozc-1.11.1522.102-3.fc19 has been pushed to the Fedora 19 stable repository. If problems still persist, please make note of it in this bug report.
https://bugzilla.redhat.com/show_bug.cgi?id=1013789
Fedora Update System updates@fedoraproject.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Fixed In Version|mozc-1.11.1522.102-3.fc19 |mozc-1.11.1522.102-3.fc20
--- Comment #5 from Fedora Update System updates@fedoraproject.org --- mozc-1.11.1522.102-3.fc20 has been pushed to the Fedora 20 stable repository. If problems still persist, please make note of it in this bug report.
i18n-bugs@lists.fedoraproject.org