Bug 174117

Summary:	screensaver not activated while(before) suspending to Disk
Product:	[Unmaintained] solid	Reporter:	Srikrishan Malik <srikrishanmalik>
Component:	powermanagement-daemon	Assignee:	Dario Freddi <drf>
Status:	RESOLVED DUPLICATE
Severity:	normal	CC:	bugs.kde.org, per.angstrom, srikrishanmalik
Priority:	NOR
Version:	unspecified
Target Milestone:	---
Platform:	Ubuntu
OS:	Linux
Latest Commit:		Version Fixed In:
Sentry Crash Report:

Description Srikrishan Malik 2008-11-02 18:46:01 UTC

Version:            (using KDE 4.1.1)
OS:                Linux
Installed from:    Ubuntu Packages

KDE version = 4.1
Not sure what component to link it with, so linking with screensaver, please change if required.

When you suspend the running system to disk it does not lock the screen before suspending, So after resume you get a Desktop directly without putting in any passwords.

I think its a security hole. 

when a user clicks the "suspend to disk button"  the screen should be locked first and then the suspend/hibernate routine should be kicked off. While resuming you resume normally and provide the user with a unlock dialog.

-Sri

Comment 1 Srikrishan Malik 2008-11-03 05:40:07 UTC

I was not able to reproduce this second time.
Resolving as non-reproducible.

Comment 2 Srikrishan Malik 2008-11-03 17:29:33 UTC

I saw it again. Seems that it reproduces only under certain specific scenario.
I will find out more post my findings here.

-Sri

Comment 3 Srikrishan Malik 2008-11-03 17:32:55 UTC

When I suspended my laptop today, I had and external monitor connected. This may be the scenario. I will try this when I get back to office.

Comment 4 Guillermo Belli 2008-11-08 17:06:23 UTC

I can reproduce this bug in a laptop and a desktop system.

Hitting K -> Leave -> Turn Off Computer -> Suspend to RAM takes the computer into susopend mode. After resume it goes directly to the desktop, does no ask for a password.

Using KDE 4.1.3 on Kubuntu 8.10 x86_64.

Comment 5 Srikrishan Malik 2008-11-08 18:17:55 UTC

Thanks Guillermo, you gave me hope :-)

Me too can repro this on suspend this harddisk.
So, this is reproducible for both "Suspend to ram" and "suspend to HDD"

This time I had not connected any external monitor to my laptop. I could reproduce this twice.

Comment 6 Guillermo Belli 2008-12-02 23:13:23 UTC

I found that usin kpowersave to suspend the computers locks the screen, but you have to specify this behavior in the settings.

Still, using the suspend function from the K menu does not lock the scrren.

Comment 7 Per Ångström 2010-01-27 19:52:32 UTC

I'm seeing the same behavior in KDE 4.3.95. I don't recall seeing this before, so what I'm seeing might be a regression. On the other hand, I always suspend my laptop by pressing the laptop's Fn-button combination, and then the screen saver is activated.

Comment 8 Tom Chiverton 2010-04-11 16:34:56 UTC

I see this with 4.4.

I think it is a information disclosure security hole (I could have left my banking details on screen, trusting the 'screen lock when resume' feature to work.

Comment 9 Tom Chiverton 2010-07-30 11:09:18 UTC

Still broken in RC3. Related https://bugs.kde.org/show_bug.cgi?id=224517 has been escalated to major.

Comment 10 Dario Freddi 2010-11-10 01:15:25 UTC


*** This bug has been marked as a duplicate of bug 224517 ***