Public bug reported:
Following to the suggestion at https://bugs.launchpad.net/ubuntu/+source
/gnome-screensaver/+bug/1280300/comments/17 I'm opening this new bug.
It's very similar, possibly a duplicate, of #1280300 and #1509711 but
apparently we have to open a bug for every desktop environment we use.
I'm on 16.04 with Gnome-Flashback Compiz, XDG_CURRENT_DESKTOP=GNOME-
Flashback:Unity
When I resume from sleep, the contents of my desktop (including any open
windows, emails, etc) are displayed onscreen briefly before the unlock
screen is shown. This potentially allows an attacker to view the
contents of a locked screen.
To reproduce:
1) Suspend a machine, e.g. by closing the lid
2) Resume the machine
Expected results:
Upon resume, the first thing shown onscreen is the screensaver unlock screen.
Actual results:
Upon resume, the first thing shown onscreen is the set of open windows that
were displayed before the machine was put to sleep. After a second or two, the
unlock screen is drawn and you have to enter a password to unlock the machine.
This is reproducible on my system.
$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 16.04 LTS
Release: 16.04
Codename: xenial
Maybe the package involved is gnome-screesaver
$ dpkg -l gnome-screensaver
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name Version
Architecture Description
+++-=============================================-===========================-===========================-===============================================================================================
ii gnome-screensaver 3.6.1-7ubuntu4
amd64 GNOME screen saver and locker
** Affects: gnome-screensaver (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-screensaver in Ubuntu.
https://bugs.launchpad.net/bugs/1581384
Title:
Desktop contents displayed on resume before lock screen is shown
Status in gnome-screensaver package in Ubuntu:
New
Bug description:
Following to the suggestion at
https://bugs.launchpad.net/ubuntu/+source/gnome-
screensaver/+bug/1280300/comments/17 I'm opening this new bug. It's
very similar, possibly a duplicate, of #1280300 and #1509711 but
apparently we have to open a bug for every desktop environment we use.
I'm on 16.04 with Gnome-Flashback Compiz, XDG_CURRENT_DESKTOP=GNOME-
Flashback:Unity
When I resume from sleep, the contents of my desktop (including any
open windows, emails, etc) are displayed onscreen briefly before the
unlock screen is shown. This potentially allows an attacker to view
the contents of a locked screen.
To reproduce:
1) Suspend a machine, e.g. by closing the lid
2) Resume the machine
Expected results:
Upon resume, the first thing shown onscreen is the screensaver unlock screen.
Actual results:
Upon resume, the first thing shown onscreen is the set of open windows that
were displayed before the machine was put to sleep. After a second or two, the
unlock screen is drawn and you have to enter a password to unlock the machine.
This is reproducible on my system.
$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 16.04 LTS
Release: 16.04
Codename: xenial
Maybe the package involved is gnome-screesaver
$ dpkg -l gnome-screensaver
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name Version
Architecture Description
+++-=============================================-===========================-===========================-===============================================================================================
ii gnome-screensaver 3.6.1-7ubuntu4
amd64 GNOME screen saver and locker
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-screensaver/+bug/1581384/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
