[Bug 10089] New: Suspend + lock screen works a bit insecure

classic Classic list List threaded Threaded
6 messages Options
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

[Bug 10089] New: Suspend + lock screen works a bit insecure

bugzilla-daemon
https://bugzilla.xfce.org/show_bug.cgi?id=10089

            Bug ID: 10089
           Summary: Suspend + lock screen works a bit insecure
    Classification: Xfce
           Product: Xfce4-session
           Version: 4.10.0
          Hardware: PC (x86_64)
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: Medium
         Component: General
          Assignee: [hidden email]
          Reporter: [hidden email]
        QA Contact: [hidden email]
                CC: [hidden email], [hidden email]

Running XFCE on Xubuntu 13.04 and noticed that suspend + lock screen doesn't
always work as expected. When I'm suspending the system and the option "Lock
screen when going for suspend/hibernate" is used, the system seeems to suspend
normally. However, when waking up the system yet again, I see a short glance of
the desktop that was on when suspending. Only after that I get the lock screen
password prompt. This happens randomly, not always.

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Xfce-bugs mailing list
[hidden email]
https://mail.xfce.org/mailman/listinfo/xfce-bugs
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

[Bug 10089] Suspend + lock screen works a bit insecure

bugzilla-daemon
https://bugzilla.xfce.org/show_bug.cgi?id=10089

--- Comment #1 from [hidden email] ---
Running 'xflock4 && xfce4-session-logout -s' is a workaround

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Xfce-bugs mailing list
[hidden email]
https://mail.xfce.org/mailman/listinfo/xfce-bugs
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

[Bug 10089] Suspend + lock screen works a bit insecure

bugzilla-daemon
In reply to this post by bugzilla-daemon
https://bugzilla.xfce.org/show_bug.cgi?id=10089

Jarno Suni <[hidden email]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[hidden email]

--- Comment #2 from Jarno Suni <[hidden email]> ---
Downstream report:
https://bugs.launchpad.net/ubuntu/+source/xfce4-session/+bug/1054299

The caller of xflock4 should wait until xflock4 exits, i.e. not run xflock4 in
background.

This is an issue with xfce4-power-manager, as well.
Please, see https://bugzilla.xfce.org/show_bug.cgi?id=6413
Especially comments 1 and 2.

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Xfce-bugs mailing list
[hidden email]
https://mail.xfce.org/mailman/listinfo/xfce-bugs
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

[Bug 10089] Suspend + lock screen works a bit insecure

bugzilla-daemon
In reply to this post by bugzilla-daemon
https://bugzilla.xfce.org/show_bug.cgi?id=10089

--- Comment #3 from Jarno Suni <[hidden email]> ---
Please note that even the workaround given in Comment 1 does not work in
principle, if xflock4 uses one of the lockers that start in background. Those
include xlock, slock, slimlock or any locker configured with xautolock, when
considering the proposed xflock4:
http://bug-attachment.xfce.org/attachment.cgi?id=5359
(featured within https://bugzilla.xfce.org/show_bug.cgi?id=10217)

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Xfce-bugs mailing list
[hidden email]
https://mail.xfce.org/mailman/listinfo/xfce-bugs
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

[Bug 10089] Suspend + lock screen works a bit insecure

bugzilla-daemon
In reply to this post by bugzilla-daemon
https://bugzilla.xfce.org/show_bug.cgi?id=10089

--- Comment #4 from Jarno Suni <[hidden email]> ---
(In reply to siukola.antti from comment #1)
> Running 'xflock4 && xfce4-session-logout -s' is a workaround

Yes, if xflock4 uses xscreensaver, but if it uses light-locker, the script
doesn't work according to my experience in Ubuntu Studio 14.04: the logout
command requests password in background.

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Xfce-bugs mailing list
[hidden email]
https://mail.xfce.org/mailman/listinfo/xfce-bugs
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

[Bug 10089] Suspend + lock screen works a bit insecure

bugzilla-daemon
In reply to this post by bugzilla-daemon
https://bugzilla.xfce.org/show_bug.cgi?id=10089

--- Comment #5 from Jarno Suni <[hidden email]> ---
(In reply to siukola.antti from comment #0)
> Running XFCE on Xubuntu 13.04 and noticed that suspend + lock screen doesn't
> always work as expected. When I'm suspending the system and the option "Lock
> screen when going for suspend/hibernate" is used, the system seeems to
> suspend normally. However, when waking up the system yet again, I see a
> short glance of the desktop that was on when suspending. Only after that I
> get the lock screen password prompt. This happens randomly, not always.

If I have understood correctly, xfce4-session nowadays waits until xflock4
finishes, before it suspends. The problem was especially with xscreensaver,
since it can be configured to fade screen given time and it may slow anyway
[1]. However, since current xflock4 runs 'xscreensaver-command -lock' in
foreground, it waits until the fading is complete.

[1] https://bugs.launchpad.net/ubuntu/+source/xscreensaver/+bug/1701917

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Xfce-bugs mailing list
[hidden email]
https://mail.xfce.org/mailman/listinfo/xfce-bugs
Loading...