[Security Issue] Sleep mode takes long enough for password to be entered on lockscreen, thereby by-passing the lock screen on resume
After suspending - either from pressing the suspend button, or closing the lid, - I notice that the delay is significant enough that I am able to enter my password on the visible lock screen before the machine actually goes to sleep. And when the machine awakes, there is no lock screen, so I am back on the desktop again.
I am using xsecurelock
as LockCommand
.
Is this something that can be fixed by tweaking some settings, or is this just how XFCE does things, or a limitation of X as suggested in #69 (closed).
Proposed solution
If this delay is something that cannot be remedied easily, then I propose that a fix is implemented that disables all interactions with input devices until after sleep mode.
EDIT
Upon inspecting kernel logs, I noticed this line:
systemd-logind[934]: Delay lock is active (UID 1000/chigozirim, PID 434305/systemd-inhibit) but inhibitor timeout is reached.
I'm guessing this might be the cause?