Can you please be very specific about how "User 1 signs in" and "User 2 signs in"? Are you referring to logging into the system or into the user profile in Chrome? When you say "User2 signs in, in chrome" how specifically are they doing so?

Different Linux user login accounts should not be sharing credentials in any way in a normal configuration.

user 1 uses computer 1 opens chrome , goes to https://drive.google.com/ ands signs in. chrome asks to save the password and user 1 stores it. now he logs out of the website https://drive.google.com/. 

user 2 uses also computer 1 and opens chrome and signs in into the user profile in chrome. he is now able to acess the account from computer 1 and all other computers where he signs into the user profile in Chrome. it doesn matter if it is a linix system, mac osx or windows system.

> and signs in into the user profile in chrome

Could you clarify a bit more?: User 2 signs into user2's profile or user1's profile?

> he is now able to acess the account from computer 1 and all other computers where he signs into the user profile in Chrome

Did you mean user2 can access user1's drive.google.com account from any other computer?

Thanks

User 2 signs into user2's profile.

yes i mean user2 can access user1's drive.google.com account from any other computer

I suspect what's happening is that user 1 is saving their password in the default profile, and then user 2 is using that same profile and enabling syncing, thus syncing user1's saved password to all of user2's other logged-in chrome instances.

To avoid that, each user should have their own account in the OS, and should not share a profile. In general this is WAI.

so this is a feature and no security issue?

that sounds like  "to avoid that, each user should have their own computer, and should not share it"  ->   what would be the solution for many security issues.

if this is final. plz close the  issue.

Yes, if you share your OS-login account, all of your local data is accessible to another user.  This includes locally saved passwords.

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot