gnome-screensaver only locks the screen a moment after resuming from standby

Bug #1800426 reported by PeterPall
256
This bug affects 1 person
Affects Status Importance Assigned to Milestone
gnome-screensaver (Ubuntu)
New
Undecided
Unassigned

Bug Description

If I lock my screen by pressing my system's "suspend" button and walk away anyone can get and photograph a glimpse of my unlocked screen just by pressing any key:

 - the system wakes up and shows the contents of the theoretically-locked screen
 - keyboard input is activated allowing - if one is quick - to enter and execute a command.
 - the screen is locked. Alas! too late.

For Android and the iPhone more harmless ways to get glympses of the unlocked system were treated as security scandals by heise.de and golem.de (IT-centered german press services) => reporting this as a security bug.

ProblemType: Bug
DistroRelease: Ubuntu 18.10
Package: gnome-screensaver 3.6.1-8ubuntu3
Uname: Linux 4.18.1-041801-lowlatency x86_64
ApportVersion: 2.20.10-0ubuntu13
Architecture: amd64
Date: Mon Oct 29 07:54:36 2018
SourcePackage: gnome-screensaver
UpgradeStatus: No upgrade log present (probably fresh install)

Revision history for this message
PeterPall (peterpall) wrote :
Revision history for this message
Marc Deslauriers (mdeslaur) wrote :

Which desktop environment are you running? Are you sure you're running gnome-screensaver?

Changed in gnome-screensaver (Ubuntu):
status: New → Incomplete
Revision history for this message
PeterPall (peterpall) wrote :

Gnome; it doesn't matter if gnome on X or on Wayland.

Changed in gnome-screensaver (Ubuntu):
status: Incomplete → New
Revision history for this message
Marc Deslauriers (mdeslaur) wrote :

Ok, then it's not gnome-screensaver. Gnome uses the shell to do screen locking. Thanks.

information type: Private Security → Public Security
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.