Public bug reported: Following to the suggestion at https://bugs.launchpad.net/ubuntu/+source /gnome-screensaver/+bug/1280300/comments/17 I'm opening this new bug. It's very similar, possibly a duplicate, of #1280300 and #1509711 but apparently we have to open a bug for every desktop environment we use.
I'm on 16.04 with Gnome-Flashback Compiz, XDG_CURRENT_DESKTOP=GNOME- Flashback:Unity When I resume from sleep, the contents of my desktop (including any open windows, emails, etc) are displayed onscreen briefly before the unlock screen is shown. This potentially allows an attacker to view the contents of a locked screen. To reproduce: 1) Suspend a machine, e.g. by closing the lid 2) Resume the machine Expected results: Upon resume, the first thing shown onscreen is the screensaver unlock screen. Actual results: Upon resume, the first thing shown onscreen is the set of open windows that were displayed before the machine was put to sleep. After a second or two, the unlock screen is drawn and you have to enter a password to unlock the machine. This is reproducible on my system. $ lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 16.04 LTS Release: 16.04 Codename: xenial Maybe the package involved is gnome-screesaver $ dpkg -l gnome-screensaver Desired=Unknown/Install/Remove/Purge/Hold | Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad) ||/ Name Version Architecture Description +++-=============================================-===========================-===========================-=============================================================================================== ii gnome-screensaver 3.6.1-7ubuntu4 amd64 GNOME screen saver and locker ** Affects: gnome-screensaver (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-screensaver in Ubuntu. https://bugs.launchpad.net/bugs/1581384 Title: Desktop contents displayed on resume before lock screen is shown Status in gnome-screensaver package in Ubuntu: New Bug description: Following to the suggestion at https://bugs.launchpad.net/ubuntu/+source/gnome- screensaver/+bug/1280300/comments/17 I'm opening this new bug. It's very similar, possibly a duplicate, of #1280300 and #1509711 but apparently we have to open a bug for every desktop environment we use. I'm on 16.04 with Gnome-Flashback Compiz, XDG_CURRENT_DESKTOP=GNOME- Flashback:Unity When I resume from sleep, the contents of my desktop (including any open windows, emails, etc) are displayed onscreen briefly before the unlock screen is shown. This potentially allows an attacker to view the contents of a locked screen. To reproduce: 1) Suspend a machine, e.g. by closing the lid 2) Resume the machine Expected results: Upon resume, the first thing shown onscreen is the screensaver unlock screen. Actual results: Upon resume, the first thing shown onscreen is the set of open windows that were displayed before the machine was put to sleep. After a second or two, the unlock screen is drawn and you have to enter a password to unlock the machine. This is reproducible on my system. $ lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 16.04 LTS Release: 16.04 Codename: xenial Maybe the package involved is gnome-screesaver $ dpkg -l gnome-screensaver Desired=Unknown/Install/Remove/Purge/Hold | Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad) ||/ Name Version Architecture Description +++-=============================================-===========================-===========================-=============================================================================================== ii gnome-screensaver 3.6.1-7ubuntu4 amd64 GNOME screen saver and locker To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnome-screensaver/+bug/1581384/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp