19

After a recent package update, the guest session feature is no longer available on Ubuntu 16.10 and 17.04. What happened?

  • if that applies like that to 18.04 can we add tags to that version please. – TiloBunt Jun 18 '18 at 20:41
  • @TiloBunt: Thanks for pointing it out. It does apply to all versions later than 16.04 which use LightDM, so I dropped the version tags instead and changed the title. Default display manager for standard Ubuntu as from 17.10 is GDM, which does not carry a guest session feature at all. – Gunnar Hjalmarsson Jun 18 '18 at 21:11
17

The guest session was intentionally disabled by default due to a security issue, where the guest session was not contained by the AppArmor profile that usually limits guest sessions. This AppArmor profile, among other things, prevents a guest user from using su to switch to other users, or viewing other users' home directories.

You can enable it, if you consider the issue to be manageable on your system, as explained in comment #24 of the bug report or by using this one liner:

sudo sh -c 'printf "[Seat:*]\nallow-guest=true\n" >/etc/lightdm/lightdm.conf.d/40-enable-guest.conf'

To reverse it back to the disabled state, simply do:

sudo rm /etc/lightdm/lightdm.conf.d/40-enable-guest.conf
  • Is 16.04 unaffected by this? – Anwar May 15 '17 at 15:45
  • @Anwar: No it's not. It's a systemd thing. – Gunnar Hjalmarsson May 15 '17 at 15:49
  • @GunnarHjalmarsson A systemd thing? So, everything since 15.04? Or is it due to the switch from upstart to systemd for user session inits? – muru May 15 '17 at 15:53
  • 1
    @Anwar: The latter (I think - please see the bug report). – Gunnar Hjalmarsson May 15 '17 at 15:54
  • 2
    @GunnarHjalmarsson It's not a big deal, but a) su doesn't use sudoers, and b) AppArmor apparently prevents su and sudo from functioning properly for guests (so sudoers doesn't even enter the picture). A user would need to know a valid user's password, but on an otherwise locked down system without access to TTYs, it does open a hole. – muru May 15 '17 at 16:24

protected by Community Oct 22 '18 at 19:55

Thank you for your interest in this question. Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged or ask your own question.