Desktop contents displayed on resume before lock screen is shown
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
gnome-screensaver (Ubuntu) |
Confirmed
|
Undecided
|
Unassigned |
Bug Description
Following to the suggestion at https:/
I'm on 16.04 with Gnome-Flashback Compiz, XDG_CURRENT_
When I resume from sleep, the contents of my desktop (including any open windows, emails, etc) are displayed onscreen briefly before the unlock screen is shown. This potentially allows an attacker to view the contents of a locked screen.
To reproduce:
1) Suspend a machine, e.g. by closing the lid
2) Resume the machine
Expected results:
Upon resume, the first thing shown onscreen is the screensaver unlock screen.
Actual results:
Upon resume, the first thing shown onscreen is the set of open windows that were displayed before the machine was put to sleep. After a second or two, the unlock screen is drawn and you have to enter a password to unlock the machine.
This is reproducible on my system.
$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 16.04 LTS
Release: 16.04
Codename: xenial
Maybe the package involved is gnome-screesaver
$ dpkg -l gnome-screensaver
Desired=
| Status=
|/ Err?=(none)
||/ Name Version Architecture Description
+++-===
ii gnome-screensaver 3.6.1-7ubuntu4 amd64 GNOME screen saver and locker
Status changed to 'Confirmed' because the bug affects multiple users.