desktop-packages team mailing list archive

[Faraz Yashar <faraz.yashar@xxxxxxxxx>]

*** This bug is a security vulnerability ***

Public security bug reported:

My laptop is set to lock and require my password after resuming from
sleep.  If I close my laptop screen (thereby inducing a sleep state) and
open it back up again, there's a significant delay (1-10 seconds!)
before the lock screen appears, and it seems like the delay depends on
the amount of RAM in use. During that delay, not only is everything on
the screen visible, but also the end user can still interact with
everything!  It's a pretty jarring security issue.

I've been experiencing this issue since v13, but haven't minded much
until recently since the delays have become much worse (might just be
due to my laptop aging though.)

ProblemType: Bug
DistroRelease: Ubuntu 15.04
Package: gnome-screensaver 3.6.1-0ubuntu16
ProcVersionSignature: Ubuntu 3.19.0-18.18-generic 3.19.6
Uname: Linux 3.19.0-18-generic x86_64
ApportVersion: 2.17.2-0ubuntu1.1
Architecture: amd64
CurrentDesktop: Unity
Date: Thu May 28 22:15:09 2015
GnomeSessionIdleInhibited: No
GnomeSessionInhibitors: None
GsettingsGnomeSession:
 org.gnome.desktop.session session-name 'ubuntu'
 org.gnome.desktop.session idle-delay uint32 0
InstallationDate: Installed on 2013-11-11 (563 days ago)
InstallationMedia: Ubuntu 13.10 "Saucy Salamander" - Release amd64 (20131016.1)
SourcePackage: gnome-screensaver
Symptom: security
Title: Screen not locked when coming out of suspend/hibernate
UpgradeStatus: Upgraded to vivid on 2015-05-23 (5 days ago)

** Affects: gnome-screensaver (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug vivid

** Information type changed from Private Security to Public Security

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-screensaver in Ubuntu.
https://bugs.launchpad.net/bugs/1459899

Title:
  1-10s delay to screen lock when coming out of suspend/hibernate

Status in gnome-screensaver package in Ubuntu:
  New

Bug description:
  My laptop is set to lock and require my password after resuming from
  sleep.  If I close my laptop screen (thereby inducing a sleep state)
  and open it back up again, there's a significant delay (1-10 seconds!)
  before the lock screen appears, and it seems like the delay depends on
  the amount of RAM in use. During that delay, not only is everything on
  the screen visible, but also the end user can still interact with
  everything!  It's a pretty jarring security issue.

  I've been experiencing this issue since v13, but haven't minded much
  until recently since the delays have become much worse (might just be
  due to my laptop aging though.)

  ProblemType: Bug
  DistroRelease: Ubuntu 15.04
  Package: gnome-screensaver 3.6.1-0ubuntu16
  ProcVersionSignature: Ubuntu 3.19.0-18.18-generic 3.19.6
  Uname: Linux 3.19.0-18-generic x86_64
  ApportVersion: 2.17.2-0ubuntu1.1
  Architecture: amd64
  CurrentDesktop: Unity
  Date: Thu May 28 22:15:09 2015
  GnomeSessionIdleInhibited: No
  GnomeSessionInhibitors: None
  GsettingsGnomeSession:
   org.gnome.desktop.session session-name 'ubuntu'
   org.gnome.desktop.session idle-delay uint32 0
  InstallationDate: Installed on 2013-11-11 (563 days ago)
  InstallationMedia: Ubuntu 13.10 "Saucy Salamander" - Release amd64 (20131016.1)
  SourcePackage: gnome-screensaver
  Symptom: security
  Title: Screen not locked when coming out of suspend/hibernate
  UpgradeStatus: Upgraded to vivid on 2015-05-23 (5 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-screensaver/+bug/1459899/+subscriptions