Dear Maintainer,

When I suspend to ram (eg, by closing the lid), then wake up, I see the last
state of my screen (desktop with open applications) for ~1sec before getting
the lightdm password prompt.
I don't know if my session is properly locked during that time, but for sure it
releases information which I would expect to be protected by proper screen
locking.

Configuration: ligthdm + xfce + lightlocker (thus I'm not sure against which
package to report the bug)

I suspect the `lid close' event is handled by systemd to suspend before
xfce/lightdm has a chance to lock the screen

Temporary fix: run [light-locker-command -l] or [xfce4-session-logout -u]
before closing the lid


   * What led up to the situation?
apt-get dist-upgrade in August (was working properly before, both with buster
and right after upgrading to bullseye - say in July)

   * What exactly did you do (or not do) that was effective (or
     ineffective)?
   * What was the outcome of this action?
   * What outcome did you expect instead?
tried to play with the various configuration options in xfce-power-management
also tried to play with commands like [xfconf-query -c xfce4-power-manager -p
/xfce4-power-manager/logind-handle-lid-switch -n -t bool -s true], as mentioned
here
https://askubuntu.com/questions/460101/xfce4-power-manager-suspend-not-
available-for-lid-close

so far I couldn't find a configuration that properly locks the screen when I
just close the lid

Best,
Damien

You can vt-switch to VT7 to check for yourself, but I'd assume it *is* locked
(please report otherwise).

Please also try the “late lock” settings and see if that makes a difference.

Regards,

If I switch to VT7 once the ligthdm login screen has appeared, I get
to see my screen before suspend (desktop with the open applications,
and thus potentially sensitive data, but everything frozen).
I see it for 10 seconds, during which touchpad and keyboard are not
responsive ; then the lightdm login screen appears again.
I can repeat the process: if I do not login, I can still switch again
to VT7 and see my frozen desktop for 10 more seconds... pretty bad...
although not as bad as having the session wide open, I agree.
Where/how can I play with this setting?


I did some other experiments:
- if I do [xfce4-session-logout -u] so that I get the login screen,
then switch to VT7, I see my desktop for a very brief amount of time
(much less than the second from my initial bug-report, but still, I
could imagine taking a picture of it), then I see white text on a
black background saying (in french) "this session is locked, you'll be
redirected in a moment", and I get the login screen after 10secs. If I
try again to switch to VT7 I get the white text directly (without
first seeing my desktop anymore)

- if I do [ligth-locker-command -l] then I get a black screen and I
need to switch to VT1 and then to VT8 to get the login screen. If I
switch to VT7 I get the white text on black background without seeing
my desktop. (That I need to switch first to VT1 is a bug that was
apparently already reported against light-locker.)

Best,
Damien

That's weird, I don't think I ever had that behavior. In all cases I remember
I have the behavior you describe below with the “you'll be redirected”
message.

Light locker configuration is stored in gsettings, so try with dcond-editor in
/apps/light-locker. There's also a GUI tool at
https://github.com/Antergos/light-locker-settings (not packaged in Debian).

Regards,