We've had Ubuntu on my wife's computer at home for several years now and as far as I am aware, she has always had to use her password to login.
However, a couple of days ago, she pointed out to me that after booting up her computer, she can log in simply by pressing the < enter > key at the password prompt. I checked and she is right. Interestingly, if you lock the screen, you are then forced to enter a password, you can't bypass it by pressing
This seems like a major security flaw but Googling doesn't turn up anything relevant - maybe I'm using the wrong search terms.
Perhaps also we have inadvertently changed a configuration somewhere without appreciating the consequences. However, after hunting around the Unity security settings and Googling, I can't find any way of configuring Unity to prompt for a password but allow the user to bypass it.
Oh, and for the record, yes my wife's login does have a password set and on the User Accounts GUI, "Automatic login" is OFF.
So this leads to two supplementary questions: - how do I configure her computer to require a password at the Unity login prompt? - If I can't, is this a security flaw that requires a bug report?