suspend does not lock in 18.04
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
| linux (Ubuntu) |
Medium
|
Unassigned |
Bug Description
To reproduce from the command-line (this is ubuntu 18.04):
% gsettings set org.gnome.
% gsettings get org.gnome.
true
% systemctl suspend
Now the monitors go black and report "no signal" (good), and it will stay that way for hours (good) ... but if I tap "shift" key a few times, Ubuntu 18.04 comes back without asking my password. (I expected rather that the system would be locked, i.e. I should see a dialog box that would require a password before anything else!)
Same thing if I suspend by using the upper-right-
Same thing if I let 20 minutes go by. (A msg comes up ~~ "system will suspend soon...", and it does suspend, but doesn't lock).
I have left the ubuntu-
I get the same behavior whether ubuntu-
Other info:
% wmctrl -m
Name: GNOME Shell
Class: N/A
PID: N/A
Window manager's "showing the desktop" mode: N/A
% lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 18.04.1 LTS
Release: 18.04
Codename: bionic
% uname -a
Linux ucbvax 4.15.0-36-generic #39-Ubuntu SMP Mon Sep 24 16:19:09 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux
I just upgraded from 16.04 a couple of weeks ago. I think (90%) it was locking in 16.04, but now not locking in 18.04.
If I click on the upper-right-
While it's locked in that way, I can click on the upper-right-
How can I make my system lock (automatically) every time a "suspend" happens? (Or even "every time kbd and mouse are idle for 15 minutes"?)
Please advise.
thanks
---
ProblemType: Bug
ApportVersion: 2.20.9-0ubuntu7.2
Architecture: amd64
AudioDevicesInUse:
USER PID ACCESS COMMAND
/dev/snd/
/dev/snd/
CasperVersion: 1.394
CurrentDesktop: ubuntu:GNOME
DistroRelease: Ubuntu 18.04
IwConfig:
enp2s0 no wireless extensions.
enp7s5 no wireless extensions.
lo no wireless extensions.
LiveMediaBuild: Ubuntu 18.04.1 LTS "Bionic Beaver" - Release amd64 (20180725)
MachineType: To be filled by O.E.M. To be filled by O.E.M.
Package: linux (not installed)
ProcEnviron:
TERM=xterm-
PATH=(custom, no user)
XDG_RUNTIME_
LANG=en_US.UTF-8
SHELL=/bin/bash
ProcFB: 0 nouveaufb
ProcKernelCmdLine: file=/cdrom/
ProcVersionSign
RelatedPackageV
linux-
linux-
linux-firmware 1.173.1
RfKill:
Tags: bionic
Uname: Linux 4.15.0-29-generic x86_64
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm cdrom dip lpadmin plugdev sambashare sudo
_MarkForUpload: True
dmi.bios.date: 08/23/2011
dmi.bios.vendor: American Megatrends Inc.
dmi.bios.version: 0705
dmi.board.
dmi.board.name: M5A99X EVO
dmi.board.vendor: ASUSTeK Computer INC.
dmi.board.version: Rev 1.xx
dmi.chassis.
dmi.chassis.type: 3
dmi.chassis.vendor: To Be Filled By O.E.M.
dmi.chassis.
dmi.modalias: dmi:bvnAmerican
dmi.product.family: To be filled by O.E.M.
dmi.product.name: To be filled by O.E.M.
dmi.product.
dmi.sys.vendor: To be filled by O.E.M.
Cristian Aravena Romero (caravena) wrote : | #1 |
affects: | ubuntu → linux (Ubuntu) |
Changed in linux (Ubuntu): | |
status: | New → Incomplete |
John Crown (jqc) wrote : AlsaInfo.txt | #2 |
apport information
tags: | added: apport-collected bionic |
description: | updated |
John Crown (jqc) wrote : CRDA.txt | #3 |
apport information
John Crown (jqc) wrote : CurrentDmesg.txt | #4 |
apport information
John Crown (jqc) wrote : Lspci.txt | #5 |
apport information
John Crown (jqc) wrote : Lsusb.txt | #6 |
apport information
John Crown (jqc) wrote : ProcCpuinfo.txt | #7 |
apport information
John Crown (jqc) wrote : ProcCpuinfoMinimal.txt | #8 |
apport information
John Crown (jqc) wrote : ProcInterrupts.txt | #9 |
apport information
John Crown (jqc) wrote : ProcModules.txt | #10 |
apport information
John Crown (jqc) wrote : PulseList.txt | #11 |
apport information
John Crown (jqc) wrote : UdevDb.txt | #12 |
apport information
John Crown (jqc) wrote : WifiSyslog.txt | #13 |
apport information
John Crown (jqc) wrote : | #14 |
The apport-collect info (reflected above) was gathered while running in "try ubuntu" mode from the install media.
Before I ran apport-collect, I
1. gave the "Live session user" a password, and
2. confirmed that "Automatic Login" was OFF ; and
3. I verified that when I logged-out, I was required to enter a password; and
4. I verified that when I "suspended", no password was required.
in other words, the reported behavior is seen in the most basic configuration, namely, running from the install media.
thanks,
jqc
Changed in linux (Ubuntu): | |
importance: | Undecided → Medium |
John Crown (jqc) wrote : | #15 |
I believe this bug affects security, given that it is a failure of Ubuntu to perform a
"Session Lock". E.g. this is from NIST Special Publication 800-53 (Rev. 4):
https:/
The information system:
a. Prevents further access to the system by initiating a session lock
after [Assignment: organization-
upon receiving a request from a user; and
b. Retains the session lock until the user reestablishes access using
established identification and authentication procedures.
The name has been changed from "Session Lock" to "Device Lock" in Rev 5
(draft, 2017), but it's still listed there for the sake of best practices.
Artur Kerge (krvl) wrote : | #16 |
Experiencing same issue on 18.10 after upgrading from 18.04.
Several others are also having issues with locking as seen on this forum post: https:/
Artur Kerge (krvl) wrote : | #17 |
Issue has been resolved fore me with latest update. Thank you devs for your time and effort!
John Crown (jqc) wrote : | #18 |
Confirming, issue is resolved for me (OP).
Sorry can't say exactly when the behavior changed, but now it's all good.
thanks
Launchpad Janitor (janitor) wrote : | #19 |
[Expired for linux (Ubuntu) because there has been no activity for 60 days.]
Changed in linux (Ubuntu): | |
status: | Incomplete → Expired |
Changed in linux (Ubuntu): | |
status: | Expired → Confirmed |
Oz123 (nahumoz) wrote : | #20 |
Dear Ubuntu team,
I don't know who sets the priority on bugs. But having this set as a medium priority means that Ubuntu isn't ready for the enterprise desktop.
Maybe it's not even your audience. But I can't used this OS as a Desktop for work purposes.
(Server is a different story... ).
It would be nice to see this propelry fixed.
John Crown (jqc) wrote : | #21 |
I'm changing the status to "Fix Released", based on current behavior. (This is 18.04 with all available current updates.) (I can no longer reproduce this problem, so somebody must have fixed it!)
I probably should have done this status change on 2019-01-10 along with the note I added then, but I didn't know I had the juice.
Changed in linux (Ubuntu): | |
status: | Confirmed → Fix Released |
Hello John,
Execute the following command in the terminal:
$ apport-collect -p linux 1798615
Best regards,
--
Cristian Aravena Romero (caravena)