<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.kde.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.6"
          urlbase="https://bugs.kde.org/"
          
          maintainer="sysadmin@kde.org"
>

    <bug>
          <bug_id>201777</bug_id>
          
          <creation_ts>2009-07-28 15:39:27 +0000</creation_ts>
          <short_desc>Lock Screen security hole with compositing enabled</short_desc>
          <delta_ts>2009-07-29 16:50:13 +0000</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>4</classification_id>
          <classification>Plasma</classification>
          <product>kwin</product>
          <component>general</component>
          <version>unspecified</version>
          <rep_platform>Compiled Sources</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>DUPLICATE</resolution>
          <dup_id>177495</dup_id>
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>NOR</priority>
          <bug_severity>normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>0</everconfirmed>
          <reporter name="Benjamin Dietrich">summel</reporter>
          <assigned_to name="KWin default assignee">kwin-bugs-null</assigned_to>
          <cc>aseigo</cc>
          
          <cf_commitlink></cf_commitlink>
          <cf_versionfixedin></cf_versionfixedin>
          <cf_sentryurl></cf_sentryurl>
          <votes>0</votes>

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>800047</commentid>
    <comment_count>0</comment_count>
    <who name="Benjamin Dietrich">summel</who>
    <bug_when>2009-07-28 15:39:27 +0000</bug_when>
    <thetext>Version:            (using Devel)
OS:                Linux
Installed from:    Compiled sources

With compositing enabled, after locking the screen (and no screensaver is configured) and somebody moves the mouse there is a short time where the actual desktop is displayed after the screen gets dark again and asks for a password. If somebody would set up a camera and then move the mouse he could grab a screenshot...</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>800050</commentid>
    <comment_count>1</comment_count>
    <who name="Benjamin Dietrich">summel</who>
    <bug_when>2009-07-28 15:43:40 +0000</bug_when>
    <thetext>Configuring/selecting a screensaver actually does not solve the problem...</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>800390</commentid>
    <comment_count>2</comment_count>
    <who name="Martin Flöser">mgraesslin</who>
    <bug_when>2009-07-29 09:00:47 +0000</bug_when>
    <thetext>could you please try if this is related to bug #177495?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>800551</commentid>
    <comment_count>3</comment_count>
    <who name="Thomas Lübking">thomas.luebking</who>
    <bug_when>2009-07-29 14:55:04 +0000</bug_when>
    <thetext>just tested w/ and w/o UnredirectFullscreen=false - so yes, it is.

*** This bug has been marked as a duplicate of bug 177495 ***</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>800578</commentid>
    <comment_count>4</comment_count>
    <who name="Benjamin Dietrich">summel</who>
    <bug_when>2009-07-29 15:47:14 +0000</bug_when>
    <thetext>BUt i don&apos;t get flickering fullscreen applications on any of the 2 tested machines.....</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>800608</commentid>
    <comment_count>5</comment_count>
    <who name="Thomas Lübking">thomas.luebking</who>
    <bug_when>2009-07-29 16:50:13 +0000</bug_when>
    <thetext>the flicker oly occurs when you open another window (dialog/popup) and thus the fullscreen window gets re-redirected (and re-undirected after the other window closed)

edit
&quot;~/.kde/share/config/kwinrc&quot; (it might be ~/.kde4/... on your distro)

find the section
[Compositing]

add a key
UnredirectFullscreen=false

reconfigure kwin (konsole)
qdbus org.kde.kwin /KWin reconfigure

test whether the screenlocker issue persists</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>