[Secure-testing-team] Bug#645427: Stopped locking the screen when closing the laptop lid

[Josh Triplett]

Package: gnome-screensaver
Version: 3.0.1-1
Severity: grave
Tags: security

I upgraded gnome-screensaver, and it stopped locking the screen when I
close the lid of my laptop.  It now only locks if I explicitly lock the
screen (ctrl-alt-L), or after some timeout (on the order of 5-15
minutes, ).

For anyone who counts on this behavior of gnome-screensaver as a
component of their system's security, this represents a security bug.

- Josh Triplett

-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.0.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages gnome-screensaver depends on:
ii  dbus-x11                   1.4.16-1     
ii  gnome-icon-theme           3.2.0-1      
ii  gnome-session-bin          2.30.2-3+sid2
ii  gsettings-desktop-schemas  3.0.1-1      
ii  libc6                      2.13-21      
ii  libcairo2                  1.10.2-6.1   
ii  libdbus-1-3                1.4.16-1     
ii  libdbus-glib-1-2           0.98-1       
ii  libgdk-pixbuf2.0-0         2.24.0-1     
ii  libglib2.0-0               2.28.6-1     
ii  libgnome-desktop-3-0       3.0.2-2      
ii  libgnomekbd7               3.2.0-1      
ii  libgtk-3-0                 3.0.12-2     
ii  libpam0g                   1.1.3-4      
ii  libx11-6                   2:1.4.4-2    
ii  libxext6                   2:1.3.0-3    
ii  libxklavier16              5.1-2        
ii  libxxf86vm1                1:1.1.1-2    

Versions of packages gnome-screensaver recommends:
ii  gnome-power-manager   2.32.0-3
ii  libpam-gnome-keyring  3.0.3-2 

gnome-screensaver suggests no packages.

-- no debconf information