Bug 425823

Summary:	Lock wallet when machine goes to suspend
Product:	[Frameworks and Libraries] frameworks-kwallet	Reporter:	Ralf Jung <post>
Component:	general	Assignee:	Valentin Rusu <valir>
Status:	RESOLVED DUPLICATE
Severity:	normal	CC:	kdelibs-bugs-null, mk.mateng
Priority:	NOR
Version First Reported In:	5.70.0
Target Milestone:	---
Platform:	Other
OS:	Linux
Latest Commit:		Version Fixed/Implemented In:
Sentry Crash Report:

Description Ralf Jung 2020-08-26 10:30:09 UTC

SUMMARY
The wallet should get locked when the machine goes to suspend, to protect secrets against memory-readout attacks. (It might even be a good idea to do this any time the screen is locked.)

STEPS TO REPRODUCE
1. Open and unlock the wallet.
2. Suspend machine.
3. Resume machine.

OBSERVED RESULT
The wallet is still unlocked.

EXPECTED RESULT
The wallet should be locked.

SOFTWARE/OS VERSIONS
Operating System: Debian GNU/Linux 
KDE Plasma Version: 5.17.5
KDE Frameworks Version: 5.70.0
Qt Version: 5.14.2
Kernel Version: 5.6.13
OS Type: 64-bit
Processors: 8 × Intel® Xeon® CPU E3-1505M v5 @ 2.80GHz
Memory: 15,5 GiB of RAM


ADDITIONAL INFORMATION
See https://blog.freesources.org//posts/2020/08/cryptsetup-suspend/ for some more discussion of security around system suspend.

Comment 1 michaelk83 2022-09-06 12:44:49 UTC


*** This bug has been marked as a duplicate of bug 375962 ***