Bug 461891

Summary:	Media control keyboard shortcuts always work on lock screen even if display of media control buttons is disabled
Product:	[Plasma] plasmashell	Reporter:	Roman Odaisky <to.roma.from.kdebug>
Component:	Screen locking	Assignee:	Plasma Bugs List <plasma-bugs-null>
Status:	CONFIRMED ---
Severity:	minor	CC:	nate
Priority:	NOR
Version First Reported In:	6.2.4
Target Milestone:	1.0
Platform:	Ubuntu
OS:	Linux
Latest Commit:		Version Fixed/Implemented In:
Sentry Crash Report:

Description Roman Odaisky 2022-11-15 23:24:19 UTC

1. Listen to an audio recording in a MPRIS-capable app
2. Ensure that Settings > Screen Locking > Appearance > Show > Media Controls is not checked
3. Lock the screen
4. Press the Play button on the keyboard
5. Observe that the audio starts playing

I’ve noticed that this applies even to voice messages in a chat app in a browser (if plasma-browser-integration is installed), so privacy concerns are much more severe than strangers potentially figuring out your favorite music styles.

Suggested resolution:
1. If media controls are hidden in settings, also disable the keyboard shortcuts
2. Alternatively, only enable the Pause and Volume Up/Down/Mute shortcuts, but not Play
3. Optionally, provide fine-grained settings for the above.

Comment 1 Bug Janitor Service 2022-11-15 23:33:32 UTC

Thank you for the bug report!

Please note that Plasma 5.25.5 is not supported for much longer by KDE; supported versions are 5.24, and 5.26 or newer.

If at all possible please upgrade to a supported version and verify that the bug is still happening there.

If you're unsure how to do this, contact your distributor about it.