[Pkg-xfce-devel] Bug#772584: xfce4-power-manager: display unlocked after resume

[Mike Kupfer]

Package: xfce4-power-manager
Version: 1.4.1-1
Severity: important

Dear Maintainer,

   * What led up to the situation?

I installed Jessie, using a dual-boot configuration (Jessie, Wheezy
(7.7)) with a shared /home.  I then tried testing suspend/resume and
hibernate/resume.  The checkbox (in the power manager preferences) to
lock the screen is selected.

   * What exactly did you do (or not do) that was effective (or
     ineffective)?

I suspended the system from the logout dialog, waited a few seconds,
then pressed a keyboard key to resume.

I hibernated the system from the logout dialog, waited a few seconds,
then pressed the power button to reboot/resume.

   * What was the outcome of this action?

My desktop reappeared.

   * What outcome did you expect instead?

I expected the display to be locked.

I have verified that the screen lock does work if I invoke it manually.

With Wheezy I don't normally use the logout dialog to
suspend/hibernate.  Instead, I invoke suspend/hibernate from the power
manager icon in the systray; when resuming, I get a locked screen.
If I use the logout dialog to suspend/hibernate, I do not get a locked
screen.

But in Jessie there does not appear to be a power manager icon, so the
logout dialog appears to be the only way to suspend/hibernate. 

I marked the severity "important" because of the security implications
and lack of workaround.

This could be the same as 739871, but since I wasn't sure, I thought it
best to file a new bug.

-- System Information:
Debian Release: 8.0
  APT prefers testing-updates
  APT policy: (500, 'testing-updates'), (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/3 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages xfce4-power-manager depends on:
ii  libc6                     2.19-13
ii  libdbus-1-3               1.8.12-1
ii  libdbus-glib-1-2          0.102-1
ii  libgdk-pixbuf2.0-0        2.31.1-2+b1
ii  libglib2.0-0              2.42.1-1
ii  libgtk2.0-0               2.24.25-1
ii  libnotify4                0.7.6-2
ii  libupower-glib3           0.99.1-3.1
ii  libx11-6                  2:1.6.2-3
ii  libxext6                  2:1.3.3-1
ii  libxfce4ui-1-0            4.10.0-6
ii  libxfce4util6             4.10.1-2
ii  libxfconf-0-2             4.10.0-3
ii  libxrandr2                2:1.4.2-1+b1
ii  upower                    0.99.1-3.1
ii  xfce4-power-manager-data  1.4.1-1

Versions of packages xfce4-power-manager recommends:
ii  libpam-systemd               215-7
ii  xfce4-power-manager-plugins  1.4.1-1

xfce4-power-manager suggests no packages.

-- no debconf information