Bug 350268 - Security flaw. Screen locker upon resume shows real desktop image briefly.
Summary: Security flaw. Screen locker upon resume shows real desktop image briefly.
Status: RESOLVED DUPLICATE of bug 348850
Alias: None
Product: ksmserver
Classification: Unmaintained
Component: lockscreen (show other bugs)
Version: unspecified
Platform: Arch Linux Linux
: NOR grave
Target Milestone: ---
Assignee: David Edmundson
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2015-07-15 23:44 UTC by empire
Modified: 2015-08-25 07:53 UTC (History)
3 users (show)

See Also:
Latest Commit:
Version Fixed In:
Sentry Crash Report:

Attachments
Add an attachment

Note You need to log in before you can comment on or make changes to this bug.
Description empire 2015-07-15 23:44:48 UTC 
When I resume the laptop from suspend to ram (by opening the lid), the monitor shows for half a second the whole desktop as it was before I closed the lid and then the locker comes up.

This is a very serious security risk because someone can see all your opened programs before you closed and suspended the computer. Someone can easily capture with a camera the half-a-second image and see sensitive information.

Reproducible: Always

Steps to Reproduce:
1. suspend laptop (e.g. close lid)
2. resume (e.g. open lid)
3.

Actual Results:  
The monitor displays for half a second the desktop with all open programs and then displays the fullscreen locker.

Expected Results:  
Locker should be the only thing that the monitor display from the very first frame.

Laptop thinkpad t410
graphics intel HD
Comment 1 David Edmundson 2015-07-17 23:53:39 UTC 
Do you use systemd?
Comment 2 empire 2015-07-30 17:49:04 UTC 
yes. systemd 222.
Comment 3 David Edmundson 2015-07-30 17:52:59 UTC 
Can you paste the output of "systemd-inhibit" please
Comment 4 empire 2015-07-30 17:58:02 UTC 
yes here it is:

[nektarios@neklaptop ~]$ systemd-inhibit 
     Who: Screen Locker (UID 1000/nektarios, PID 11106/ksmserver)
    What: sleep
     Why: Ensuring that the screen gets locked before going to sleep
    Mode: delay

     Who: NetworkManager (UID 0/root, PID 250/NetworkManager)
    What: sleep
     Why: NetworkManager needs to turn off networks
    Mode: delay

     Who: PowerDevil (UID 1000/nektarios, PID 11093/kded5)
    What: handle-power-key:handle-suspend-key:handle-hibernate-key:handle-lid-switch
     Why: KDE handles power events
    Mode: block

3 inhibitors listed.
Comment 5 David Edmundson 2015-07-30 18:01:36 UTC 
Thanks
Comment 6 Martin Flöser 2015-08-25 07:53:58 UTC 

*** This bug has been marked as a duplicate of bug 348850 ***