X session lock screen bypass

[twvd]

• [x] I've run a search on the existing bug reports to make sure I'm not filing a duplicate (you can use the search box at the top left corner)
• [x] I've read the Regolith documentation and didn't find any relevant topic
• [ ] I tried asking on Slack (especially for configuration related issues)

Describe the bug You can bypass the lock screen with a few keystrokes for the X session.

To Reproduce Steps to reproduce the behavior:

1. Click the password field
2. Press the context menu key on the keyboard, context menu appears
3. Press Super+Shift+R
4. Wait a few seconds
5. Repeat step 2 + 3
6. Screen is unlocked

Expected behavior Screen remains locked.

Configuration file(s) No customizations.

Installation Details

• Regolith Install Type: PPA
• Regolith Version: 3.0
• PPA url: stable
• Host OS (for PPA): Ubuntu 22.04

[jrn90]

I tried this on my machine and can duplicate the same behavior.

• Regolith Install Type: PPA
• Regolith Version: 2.2
• PPA url: stable
• Host OS (for PPA): Ubuntu 22.04

[kgilmer]

This bug has been reported in the past. People have found other ways of bypassing the lockscreen as well. You may have better luck by specifying a different lockscreen implementation. I believe the sway-based session also should not suffer from this bug.