Dear Maintainer,

When updating, xfce4-session introduced light-locker despite the presence of
xscreensaver. There is no preference in the xfce4-preferences for configuring
light locker - I had no idea it was running, until it locked my screen.
Lightlocker proceeded to lock me out of my system, and failed to provide a
relogin prompt.

To fix, please Recommend: lightlocker | xscreensaver.

Thanks,
Kit

Besides not obeying the preferences of an user who already has a better
alternative (xscreensaver) installed, I don't think light-locker is in a
shape good enough to be the default.  Perhaps even to be included in
stretch.

It fails in nasty ways when the session has been started via anything but
lightdm, be it gdm3/xdm/lxdm/nodm/sddm/slim/wdm/startx/vnc.

It doesn't mention in any way that the user is logged in and locked -- the
lock screen is identical to what you see at login.

It breaks suspend for a substantial portion of users.

It fails to switch VTs when you have multiple sessions.

It suffers from crashes that are quite scary in software some people use for
security (yeah, there's no real security against physical access, but a
screen lock blocks casual people pretty well).

You and me know that to recover, one can usually Alt-Ctrl-F1, login on the
console and kill misbehaving light-locker process and _hopefully_ get back
the session, but I don't expect an average user to manage that.

The only reason I see for considering light-locker are doubts about
xscreensaver's upstream's mental stability.  Which is not a blocker for a
piece of free software, as if a conflict escalates, we can fork it as
yscreensaver immediately.


Thus, if you insist for light-locker to be default, please at least make it
an alternative: ie, as the reporter of this bug suggested, make
xfce4-session Recommend: light-locker | xscreensaver, and task-xfce-desktop
Depend: light-locker | screensaver.


Meow!

Then please do it, and I'll reconsider. I'm done with xscreensaver.

We believe that the bug you reported is fixed in the latest version of
xfce4-session, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 847825@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Unit 193 <unit193@debian.org> (supplier of updated xfce4-session package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Tue, 19 Jul 2022 02:07:26 -0400
Source: xfce4-session
Architecture: source
Version: 4.16.0-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Xfce Maintainers <debian-xfce@lists.debian.org>
Changed-By: Unit 193 <unit193@debian.org>
Closes: 847825
Changes:
 xfce4-session (4.16.0-2) unstable; urgency=medium
 .
   * Team upload.
   * d/55xfce4-session: Inject DBUS_SESSION_BUS_ADDRESS into the session
     via dbus-update-activation-environment.
   * d/control:
     - Bump DH compat to 13.
     - Correct typo, fortunes-mod → fortune-mod (LP: #1883867).
     - Add all supported screen lockers from xflock4. (Closes: #847825)
   * d/rules: Drop --as-needed, as it is now the default in stable.
   * d/rules, d/systemd/*:
     - Add systemd user session, but only install it if building for Ubuntu.
   * Update Standards-Version to 4.6.1.
Checksums-Sha1:
 4b9eae447525f5714a9ef1cd5847ce393b9b2313 2213 xfce4-session_4.16.0-2.dsc
 87b5e1ec2b9ff1ca9398471623319dfc6aba6940 875504 xfce4-session_4.16.0.orig.tar.bz2
 a1f5dcb4b7db49df8b522b6321db1650e3f65818 15396 xfce4-session_4.16.0-2.debian.tar.xz
 741e48cd50ce0598a37bbb140aebaadeb3c9c597 15606 xfce4-session_4.16.0-2_amd64.buildinfo
Checksums-Sha256:
 880685d7b7f4b1e43e18a8abed58ff3e757d9806a948de40b753c157df6f6fde 2213 xfce4-session_4.16.0-2.dsc
 22f273f212481d71e0b5618c62710cd85f69aea74f5ea5c0093f7918b07d17b7 875504 xfce4-session_4.16.0.orig.tar.bz2
 618eb8731d95a403ef3b1c56a6ab6b39a38bd268bba7b10a9c740aa842d6ccbd 15396 xfce4-session_4.16.0-2.debian.tar.xz
 48ef620906dca1cd03c6d4cd0b84e36c180c9beb4812ac5c67659adebcb6654d 15606 xfce4-session_4.16.0-2_amd64.buildinfo
Files:
 b3c6749800a3361601c706f6120345be 2213 xfce optional xfce4-session_4.16.0-2.dsc
 2bb95124f91e9469ea5571c94d6034fe 875504 xfce optional xfce4-session_4.16.0.orig.tar.bz2
 6ebafb6c040db35b66efda082b681f2e 15396 xfce optional xfce4-session_4.16.0-2.debian.tar.xz
 5d0955c52c987fc1e26fe8256a3fc471 15606 xfce optional xfce4-session_4.16.0-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
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=mvRI
-----END PGP SIGNATURE-----