[Pkg-xfce-devel] Bug#738124: xfce4: Screen does not always lock during suspend/hibernate despite that option being enabled

David Z unimportantdavidz at gmail.com
Fri Feb 7 21:54:17 UTC 2014


Package: xfce4
Version: 4.8.0.3
Severity: important
Tags: upstream

Dear Maintainer,

   * What led up to the situation?

In the Xfce Power Manager dialog, under "Extended," the checkbox for "Lock
screen when going for suspend/hibernate" is checked. (An aside - that phrasing
is a little clunky. Might I suggest "Lock screen during suspend/hibernate"?)

I find that SOME times when I suspend for a short time (<5 minutes or so), I
can wake the computer and return to my session without the screen being locked
or authenticating myself. That has some concerning security implications, of
course.

I imagine that the cause is that the "lock screen" command is not completed
before the ACPI suspend occurs. Could this be fixed with a simple wait for the
lock screen portion of the sequence to return a good exit code before signaling
an ACPI suspend? This does not explain, though, why it has failed to lock only
when the suspend is for less than 5 minutes or so - I suspect that that may
even just be a fluke, since the length of the suspend really shouldn't matter
at all, as the way I understand Suspend to work, it does not allow any programs
to do anything while suspended. Perhaps there is a time-checking component to
how XFCE resumes from suspend which is interfering, wherein if the time
difference between suspend and wake is less than the configured "put the
computer to sleep" time (or its default, since I have that setting set to
"never"), it will not bother to lock the screen?

Further, on some resumes, I am able to see my desktop session for a split-
second before the lock screen draws over it - this suggests that the locking
happens upon resume, and not on suspend. I feel that locking the screen PRIOR
to engaging the suspend would be much better, for reliability of operation (as
in the main topic of this bug), security, and privacy (with regard to the
split-second view of the desktop prior to being locked - imagine if some
"unprofessional" image were being displayed for a split second when another
person happened to open the lid of my laptop!).

My apologies for the wall of text. I love your software and hope that it may
flourish another thousand years! Thank you for all of your hard work and
dedication.



-- System Information:
Debian Release: 7.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages xfce4 depends on:
ii  gtk2-engines-xfce  2.8.1-3
ii  orage              4.8.3-2
ii  thunar             1.2.3-4+b1
ii  xfce4-appfinder    4.8.0-3
ii  xfce4-mixer        4.8.0-3+b1
ii  xfce4-panel        4.8.6-4
ii  xfce4-session      4.8.3-3
ii  xfce4-settings     4.8.3-2
ii  xfce4-utils        4.8.3-2
ii  xfconf             4.8.1-1
ii  xfdesktop4         4.8.3-2
ii  xfwm4              4.8.3-2

Versions of packages xfce4 recommends:
ii  desktop-base      7.0.3
ii  tango-icon-theme  0.8.90-5
ii  thunar-volman     0.6.1-1
ii  xfce4-notifyd     0.2.2-2
ii  xorg              1:7.7+3~deb7u1

Versions of packages xfce4 suggests:
ii  xfce4-goodies  4.8.2
ii  xfprint4       4.6.1-3

-- no debconf information



More information about the Pkg-xfce-devel mailing list