search

home-sweet-gnome / dash-to-panel

An icon taskbar for the Gnome Shell. This extension moves the dash into the gnome main panel so that the application launchers and system tray are combined into a single panel, similar to that found in KDE Plasma and Windows 7+. A separate dock is no longer needed for easy access to running and favorited applications.
GNU General Public License v2.0
3.78k stars 277 forks source link

lock screen security issue #2115

Open tomaszandonamig opened 4 months ago

tomaszandonamig commented 4 months ago

In Ubuntu 24.04, using Dash to Panel, when locking the screen, the dash and the default panel are exposed, which constitutes a security flaw. This allows you to access and run applications through the menu and view sensitive information, such as data contained in CopyQ.

GNOME Shell 46.0 Dash-to-Panel 62 Installed from The GNOME extensions website

JPnux commented 4 months ago

yes the same here

jflambert commented 3 months ago

I had the same problem, and I "fixed" it by turning off "Dock" (which I guess I was supposed to have done after installing dash-to-panel?) I did have to reboot for some reason.

image

now my lock screen is fully free of any interactive areas.

NicolasGoeddel commented 2 weeks ago

I just reported it here: https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/7901

In my opinion no extension should be able to show anything on the lock screen. The lock screen should never allow any interaction with anything that was locked by it.

NicolasGoeddel commented 2 weeks ago

@jflambert wrote: I had the same problem, and I "fixed" it by turning off "Dock" (which I guess I was supposed to have done after installing dash-to-panel?) I did have to reboot for some reason.

Where did you find that option? It seems not to be part of the Dash to Panel settings.

jflambert commented 2 weeks ago

As part of Ubuntu Desktop settings image

charlesg99 commented 1 week ago

Should be fixed on master, will release on e.g.o soon.

NicolasGoeddel commented 1 week ago

As part of Ubuntu Desktop settings image

I don't have that "Ubuntu Desktop" menu in my Gnome settings. And I can not find any "Dock" settings anywhere else.

jflambert commented 1 week ago

dunno @NicolasGoeddel your best bet is to upgrade, looks like @charlesg99 just fixed it (thanks!)