On my 18.04, if I lock my session, when exit the screensaver, in particular conditions, my session is no longer locked and it is accessible without typing password. In terms of security, it’s ugly. The lock-screen works fine, because if I lock my session, the password is required before the screensaver appears. As soon as the screensaver activates, then when exit screensaver, no more lock-screen. My display is a TV plugged in HDMI that I switch off after enabled lock-screen. Sometimes, the lock-screen is retained when exit screensaver. Could you help me to keep the lock-screen when exit the screensaver? I don’t want to enable the lock-screen systematically when exit the screensaver, only if I enabled the lock-screen manually. Thank you in advance
In my opinion, it’s a critical security bug, because I can easily reproduce the problem. It seems to appears only with HDMI TV with the below conditions.
Steps to reproduce the issue :
- Enable the locks-creen
- Check it’s locked
- Press Escape to blank the screen
- Switch off the TV HDMI
- Wait 10 s
- Press Ctrl to wake-up the lock-screen
- Switch on the TV
- The lock-screen is done!
- After, no way to enable the lock-screen immediatly