GDM allows "hijacking" / attaching to an active GUI session

Desktop
,
1

Hey :waving_hand: ,

i just set up a VM with RedHat 10 (with Wayland) and Gnome + Gnome-Remote-Deskop. My intention was to use one Machine where multiple users can login and do their work. Just recently i discovered, that anybody can just “hijack” an active session of any user without needing to type in an Password. It is a comfort feature for a Computer where only one user at a time can have access, but very unpleasant if multiple users are using it in parallel.

Anyone logged in can be thrown out of their Desktop and the second person gains access without entering any password.

Is there any way enforcing an password every time

2

I’m sorry, how could they hijack an active session? Is this a bug?

RedHat usually comes with a very old GNOME version. Which GNOME version are you using? Is this related to GDM or another library?

Also, if I’m not mistaken, there should be a RedHat support line for questions related to this kind of commercial use.

3

it is not hijacking in the sense that someone steals the session of others. More like an feature that unfortunately allows stealing an active session of another user without asking for a password.

The reason why i thought i should create a post here is, it is GDM specific:/.

I thought, maybe someone outside of the redhat bubble had the same Problem and a solution to it.
For example enforcing a new session or password entry would be exactly what i need.

Here are the Informations about my gnome version.

user@test:~$ sudo rpm -qi gnome-desktop3
Name        : gnome-desktop3
Version     : 44.1
Release     : 5.el10_2
Architecture: x86_64
Install Date: Sun 21 Jun 2026 08:23:08 PM CEST
Group       : Unspecified
Size        : 3127336
License     : GPL-2.0-or-later AND LGPL-2.0-or-later AND GFDL-1.1-or-later
Signature   :
RSA/SHA256, Tue 05 May 2026 12:02:47 PM CEST, Key ID 199e2f91fd431d51
ML-DSA-87+Ed448/SHA512, Tue 05 May 2026 12:02:47 PM CEST, Key ID fcd355b305707a62
Source RPM  : gnome-desktop3-44.1-5.el10_2.src.rpm
Build Date  : Thu 30 Apr 2026 08:59:39 PM CEST
Build Host  : konflux.redhat.com
Packager    : Red Hat, Inc. http://bugzilla.redhat.com/bugzilla
Vendor      : Red Hat, Inc.
URL         : 

Summary     : Library with common API for various GNOME modules
Description :
gnome-desktop3 contains the libgnome-desktop library as well as a data
file that exports the "GNOME" version to the Settings Details panel.

The libgnome-desktop library provides API shared by several applications
on the desktop, but that cannot live in the platform for various
reasons. There is no API or ABI guarantee, although we are doing our
best to provide stability. Documentation for the API is available with
gtk-doc.
user@test:~$ sudo rpm -qi gnome-shell
Name        : gnome-shell
Version     : 49.4
Release     : 8.el10_2
Architecture: x86_64
Install Date: Sun 19 Jul 2026 08:05:09 PM CEST
Group       : Unspecified
Size        : 14992002
License     : GPL-2.0-or-later
Signature   :
RSA/SHA256, Thu 11 Jun 2026 10:00:38 AM CEST, Key ID 199e2f91fd431d51
ML-DSA-87+Ed448/SHA512, Thu 11 Jun 2026 10:00:38 AM CEST, Key ID fcd355b305707a62
Source RPM  : gnome-shell-49.4-8.el10_2.src.rpm
Build Date  : Tue 09 Jun 2026 10:32:34 AM CEST
Build Host  : konflux.redhat.com
Packager    : Red Hat, Inc. http://bugzilla.redhat.com/bugzilla
Vendor      : Red Hat, Inc.
URL         : 

Summary     : Window management and application launching for GNOME
Description :
4

You should reach out to Red Hat support for these kinds of questions

5

Thx :smiley: ,
i’ll do that.

For anybody having the same problem. I do not know why, but locking the user multiple times seems to resolved the issue, or there was an patch from RedHat.