[kde] [Bug 344934] New: After resume, desktop is shortly visible before screenlocker prompts for password

[Éric Brunet]

https://bugs.kde.org/show_bug.cgi?id=344934

            Bug ID: 344934
           Summary: After resume, desktop is shortly visible before
                    screenlocker prompts for password
           Product: kde
           Version: unspecified
          Platform: Fedora RPMs
                OS: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: NOR
         Component: general
          Assignee: unassigned-bugs at kde.org
          Reporter: eric.brunet at lps.ens.fr

This is a privacy problem concerning suspend/resume.

* What is expected: when I resume the computer, I see the locked screen
prompting me for a password.
* What actually happens: when I resume the computer, I see my desktop for a
variable amount of time (between 0 and 1 second), and then the locked screen
appears prompting for a password.

This means that someone opening my suspended computer can get a glimpse of what
I am doing, even take a photo of my desktop without knowing my password. This
could be a very problematic privacy issue. Powerdevil should make sure the
screen locker had time to display its image, or it should blank the screen in
some way before suspending the system.

Sysytem is an up-to-date Fedora 21. kde version is 4.14.4 (which is not
proposed by the bug tracking system). In case it is relevant, I am using kdm as
login manager, and I have a custom theme for the locked screen (I just copied a
theme and changed the background image).

Important point: it was working perfectly well on Fedora 20. The problem
appeared when I upgraded to F21. 

I couldn't find anything obviously related to the screen locker in the proposed
list of kde components, so I classified this as a general kde bug. Sorry about
that. 

Reproducible: Always

-- 
You are receiving this mail because:
You are the assignee for the bug.