Session security problem

[pugbrain]

Hello everyone, I have detected a problem related to the user switching / logout functionality in Kubuntu 17.10. I can not really tell if it's a distro-related issue or KDE.

The steps are:

1 - I login with my user
2 - I switch to another user
3 - After working, I log out of this user.

In my understanding, the system should request the login screen again, so that another user could login, but instead goes back to the previous session fully open without asking for any password.

This behavior was not so in version 17.04 and this creates a major security problem.

I am available for more details.

Thank you,

Pugbrain

[SpecialEd]

Check your "Desktop Sessions" settings under "Startup and Shutdown."

[Rog131]

Hello everyone, I have detected a problem related to the user switching / logout functionality in Kubuntu 17.10. I can not really tell if it's a distro-related issue or KDE.

The steps are:

1 - I login with my user
2 - I switch to another user
3 - After working, I log out of this user.

In my understanding, the system should request the login screen again, so that another user could login, but instead goes back to the previous session fully open without asking for any password.

This behavior was not so in version 17.04 and this creates a major security problem.

I am available for more details.

Thank you,

Pugbrain

If you wan't the password query when returning - use the lock screen:

1) Lock screen



2) Start new session or switch session



.
.
.

N) When returning to the first session it is locked:

[pugbrain]

Thanks for replying,. The desktop session settings are these (Brazilian Portuguese):

[pugbrain]

Thanks for the feedback Rog131,

Yes this is an option, but this was not behavior in version 17.04. Which in my point of view was safer.

Pugbrain