Bug 406636

Summary: Security problem with Desktop Grid
Product: [Plasma] kwin Reporter: Alessandro Foradori <aleseco.fora>
Component: generalAssignee: KWin default assignee <kwin-bugs-null>
Status: RESOLVED DUPLICATE    
Severity: major    
Priority: NOR    
Version: 5.15.4   
Target Milestone: ---   
Platform: Arch Linux   
OS: Linux   
Latest Commit: Version Fixed In:

Description Alessandro Foradori 2019-04-17 19:27:55 UTC
SUMMARY
Security problem with Desktop Grid (ctrl +f8), no password required after wake-up

STEPS TO REPRODUCE
1. Be sure your computer will lock or suspend automatically after n seconds and will ask your password at wake-up
2. Open Desktop Grid (ctrl+f8 by default)
3. Wait at least n+1 seconds (or close laptop lid)
4. Wake up your computer

OBSERVED RESULT
No password is required after wake up and desktop grid is still active.


EXPECTED RESULT
Lockscreen at least

SOFTWARE/OS VERSIONS
Windows: 
macOS: 
Linux/KDE Plasma: linux 5.0.7.arch1-1
(available in About System)
KDE Plasma Version: 5.15.4
KDE Frameworks Version: 5.56.1
Qt Version: 5.12.2

ADDITIONAL INFORMATION
Comment 1 Christoph Feck 2019-04-17 19:48:13 UTC
Bug 234153?
Comment 2 Martin Flöser 2019-04-18 05:38:35 UTC

*** This bug has been marked as a duplicate of bug 234153 ***