light-locker: desktop visible after resume from suspend

[Alad Wenter]

After resuming from suspend in Xubuntu Wily, the desktop is briefly visible (~1s) before the unlock dialog from light-locker appears.

https://github.com/the-cavalry/light-locker/issues/63

This upstream commit appears to solve the issue:

https://github.com/the-cavalry/light-locker/commit/c026c663303ba1cfe0cde4bc011419645392ae62

A patch that applies to the Ubuntu package is attached.

ProblemType: Bug
DistroRelease: Ubuntu 15.10
Package: gnome-screensaver (not installed)
ProcVersionSignature: Ubuntu 4.2.0-16.19-generic 4.2.3
Uname: Linux 4.2.0-16-generic x86_64
ApportVersion: 2.19.1-0ubuntu5
Architecture: amd64
CurrentDesktop: XFCE
Date: Thu Dec 24 20:26:45 2015
InstallationDate: Installed on 2015-12-24 (0 days ago)
InstallationMedia: Xubuntu Core 15.10 - amd64 - 20151022
SourcePackage: gnome-screensaver
Symptom: security
Title: Screen locking issue
UpgradeStatus: No upgrade log present (probably fresh install)

[Ubuntu Foundations Team Bug Bot (crichton)]

The attachment "Register systemd suspend delay" seems to be a patch. If it isn't, please remove the "patch" flag from the attachment, remove the "patch" tag, and if you are a member of the ~ubuntu-reviewers, unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issues please contact him.]

[Seth Arnold (seth-arnold)]

Thanks for taking the time to report this bug and helping to make Ubuntu better. Since the package referred to in this bug is in universe or multiverse, it is community maintained. If you are able, I suggest coordinating with upstream and posting a debdiff for this issue. When a debdiff is available, members of the security team will review it and publish the package. See the following link for more information: https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures

[Seth Arnold (seth-arnold)]

Alad, nice find, are you in a position that you can prepare and test updated packages? Thanks

[Tim Lunn (darkxst)]

This patch is already included in the 1.7.0 release that is in Xenial. For a backport to wily it will need the patch applied to wily packaging and SRU process followed. Unsubscribing ubuntu-sponsors until that is complete.

[tbys (tbys)]

I think this need to be set to importance: High, as it allows a malicious user to see any information displayed on the desktop without logging in.

[Harry P (hjwp2)]

I reported a similar bug here:

https://bugs.launchpad.net/ubuntu/+source/gnome-screensaver/+bug/1509711

(looks like exactly the same thing)

seems it was fixed by the xenial upgrade?

[Launchpad Janitor (janitor)]

[Expired for light-locker (Ubuntu) because there has been no activity for 60 days.]