elementary / triage

Catch-all repo for issues that don't have a better home
https://elementary.io
4 stars 2 forks source link

Whole screen contents shown after wake before lockscreen is shown (power settings inadequate) #418

Open liamelliott opened 1 year ago

liamelliott commented 1 year ago

What Happened?

There is an issue with the sleep-wake-hibernate behaviour in the OS. When I open the lid to my laptop, everyone can see the contents of the screen. Only after a couple of seconds does the system realize it's supposed to be locked, and then the system switches to the lockscreen.

A side note is that the power settings are inadequate in the OS. Even if the setting on lid close is to hibernate or suspend, the system should be locked immediately. I haven't tested it yet, but this could be a serious vulnerability and an easily exploitable one.

I posted another sleep-wake issue here, maybe they're related? It would be much better if the system could be locked on lid close, and then suspend/hibernate after a certain period of time. As of now, the power settings only allow you to choose one option for lid close.

I'm posting this here as I believe it is related to the power settings and sleep-wake.

Steps to Reproduce

Close lid and open

Expected Behavior

System should be locked before the wake process. Nobody should be able to view the screen contents of a "locked" system.

OS Version

6.x (Odin)

Software Version

Latest release (I have run all updates)

Log Output

No response

Hardware Info

No response

liamelliott commented 1 year ago

I just restarted my machine after changing the setting to lock the screen when the lid is closed. It now works as intended, but the system only suspends after 10 minutes as per my suspend on batttery/when plugged in settings dictate. The correct behaviour would be to do both when the lid is closed. Whether suspension happens or not, the laptop should always be locked when the lid is closed.

spotlesscoder commented 6 months ago

Happens for me, too

Please take this more seriously, dear elementary team. Having good design etc. is important but not as important as data security ;)