Ubuntu
xfce4-session package

Lock screen randomly bypassed

Bug #1674762 reported by Josh Fuhs
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
xfce4-session (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

A fresh install of Ubuntu 16.04.2 or 16.10 on an Asus Zenbook Flip 360C allows the lock screen to be bypassed.

When the machine is suspended and resumed (and configured to do so), the desktop session should always lock.

When the Terminal and System Settings applications are running and the system is suspended, it may bypass the lock screen entirely when resumed. It gives the appearance of attempting to lock but then presents the desktop. When this happens, the mouse click also doesn't function. Tapping the MS button seems to correct this.

On 16.10, Terminal + System Settings + Firefox seemed to reproduce the problem more.

It doesn't yet look like there's a way for the user to directly provoke this once the system is suspended.

See original description
Josh Fuhs (fuhsjr00)
description: updated
Revision history for this message
Emily Ratliff (emilyr) wrote :

Thank you for taking the time to report this bug and helping to make Ubuntu better. This particular bug has already been reported and is a duplicate of bug 49579, so it is being marked as such.

This is a fundamental bug in the design of X11 and cannot be easily fixed within X11.

You should manually lock your screen if a locked session is important to you.

Please continue to report any other bugs you may find.

information type: Private Security → Public
Changed in xfce4-session (Ubuntu):
status: New → Confirmed
Revision history for this message
Josh Fuhs (fuhsjr00) wrote :

I saw and also repro'ed #49579, but since that was already filed I left it alone.

This bug looks different in that it randomly locks or not with no change to the focus or open windows. It does repro much more frequently when I have certain combinations of windows open, but the failure to lock is not guaranteed. It also doesn't seem to be related to any of the menus and an explicit lock-screen isn't ignored.

I don't know enough about the structure of the OS to disagree any further, so I'll defer to your judgement.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.