Bug 174117 - screensaver not activated while(before) suspending to Disk
Summary: screensaver not activated while(before) suspending to Disk
Status: RESOLVED DUPLICATE of bug 224517
Alias: None
Product: solid
Classification: Unmaintained
Component: powermanagement-daemon (show other bugs)
Version: unspecified
Platform: Ubuntu Linux
: NOR normal
Target Milestone: ---
Assignee: Dario Freddi
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2008-11-02 18:46 UTC by Srikrishan Malik
Modified: 2010-11-10 01:15 UTC (History)
3 users (show)

See Also:
Latest Commit:
Version Fixed In:
Sentry Crash Report:

Attachments
Add an attachment

Note You need to log in before you can comment on or make changes to this bug.
Description Srikrishan Malik 2008-11-02 18:46:01 UTC 
Version:            (using KDE 4.1.1)
OS:                Linux
Installed from:    Ubuntu Packages

KDE version = 4.1
Not sure what component to link it with, so linking with screensaver, please change if required.

When you suspend the running system to disk it does not lock the screen before suspending, So after resume you get a Desktop directly without putting in any passwords.

I think its a security hole. 

when a user clicks the "suspend to disk button"  the screen should be locked first and then the suspend/hibernate routine should be kicked off. While resuming you resume normally and provide the user with a unlock dialog.

-Sri
Comment 1 Srikrishan Malik 2008-11-03 05:40:07 UTC 
I was not able to reproduce this second time.
Resolving as non-reproducible.
Comment 2 Srikrishan Malik 2008-11-03 17:29:33 UTC 
I saw it again. Seems that it reproduces only under certain specific scenario.
I will find out more post my findings here.

-Sri
Comment 3 Srikrishan Malik 2008-11-03 17:32:55 UTC 
When I suspended my laptop today, I had and external monitor connected. This may be the scenario. I will try this when I get back to office.
Comment 4 Guillermo Belli 2008-11-08 17:06:23 UTC 
I can reproduce this bug in a laptop and a desktop system.

Hitting K -> Leave -> Turn Off Computer -> Suspend to RAM takes the computer into susopend mode. After resume it goes directly to the desktop, does no ask for a password.

Using KDE 4.1.3 on Kubuntu 8.10 x86_64.
Comment 5 Srikrishan Malik 2008-11-08 18:17:55 UTC 
Thanks Guillermo, you gave me hope :-)

Me too can repro this on suspend this harddisk.
So, this is reproducible for both "Suspend to ram" and "suspend to HDD"

This time I had not connected any external monitor to my laptop. I could reproduce this twice.
Comment 6 Guillermo Belli 2008-12-02 23:13:23 UTC 
I found that usin kpowersave to suspend the computers locks the screen, but you have to specify this behavior in the settings.

Still, using the suspend function from the K menu does not lock the scrren.
Comment 7 Per Ångström 2010-01-27 19:52:32 UTC 
I'm seeing the same behavior in KDE 4.3.95. I don't recall seeing this before, so what I'm seeing might be a regression. On the other hand, I always suspend my laptop by pressing the laptop's Fn-button combination, and then the screen saver is activated.
Comment 8 Tom Chiverton 2010-04-11 16:34:56 UTC 
I see this with 4.4.

I think it is a information disclosure security hole (I could have left my banking details on screen, trusting the 'screen lock when resume' feature to work.
Comment 9 Tom Chiverton 2010-07-30 11:09:18 UTC 
Still broken in RC3. Related https://bugs.kde.org/show_bug.cgi?id=224517 has been escalated to major.
Comment 10 Dario Freddi 2010-11-10 01:15:25 UTC 

*** This bug has been marked as a duplicate of bug 224517 ***