2

Hi, people!

I would like to know if it is possible to add the buttons shutdown-restart-suspend-hibernate to the lock screen. Since these buttons, they do appear when you log in for the first time, or when you log out, but not when the screen is locked.

I hope I have raised my first question well. Thank you very much, and excuse my English!

Edit:

I understand it was about security issues, but I think it could be better. The solution proposed by "avlas" seems reasonable and would be very useful...

https://bugs.kde.org/show_bug.cgi?id=390634#c2

avlas 2018-02-26 18:23:16 UTC

There could be a compromise here. So when one wants hits a turn-off/reboot buttong in the lock screen:

1. A message appears asking for the password to proceed

2. With focus on the text box to introduce the password

3. Once correctly introduced, the lock screen does not enter the session, but directs to plymouth.

For people not really bothering about security, point 1. and 2. could be made optional (default settings keeping those steps).

The rationale is:

- Why does one want to enter the session to look for a shutdown/reboot button somewhere?

- Why not to add the buttons directly to the screen locker and ask for the password just in there?

marcesdan wrote:Hi, people!

I would like to know if it is possible to add the buttons shutdown-restart-suspend-hibernate to the login screen, when the screen is blocked (re-login). Since these buttons, they do appear when you log in for the first time, or when you log out, but not when the screen is blocked (after the first login). I mean, I do not want to have to put my password to suspend my computer, when a time passed and the screen is blocked. I do not know if you understand...

I hope I have raised my first question well. I do not know if it's the right place, and honestly, I do not know the tags where this would go, sorry.

Thank you very much, and excuse my English!

Do you mean the lock screen ?



By the developer/maintainer: Bug 390634 - Possibility to shutdown/hibernate system from lockscreen - https://bugs.kde.org/show_bug.cgi?id=390634 -> https://bugs.kde.org/show_bug.cgi?id=390634#c1

Status: RESOLVED WONTFIX

Martin Flöser 2018-02-18 16:15:59 UTC
We used to have this. We removed it as it creates a security issue (a not-logged in user is able to interrupt the session of the running users).

Rog131 wrote:

marcesdan wrote:Hi, people!

I would like to know if it is possible to add the buttons shutdown-restart-suspend-hibernate to the login screen, when the screen is blocked (re-login). Since these buttons, they do appear when you log in for the first time, or when you log out, but not when the screen is blocked (after the first login). I mean, I do not want to have to put my password to suspend my computer, when a time passed and the screen is blocked. I do not know if you understand...

I hope I have raised my first question well. I do not know if it's the right place, and honestly, I do not know the tags where this would go, sorry.

Thank you very much, and excuse my English!

Do you mean the lock screen ?



By the developer/maintainer: Bug 390634 - Possibility to shutdown/hibernate system from lockscreen - https://bugs.kde.org/show_bug.cgi?id=390634 -> https://bugs.kde.org/show_bug.cgi?id=390634#c1

Status: RESOLVED WONTFIX

Martin Flöser 2018-02-18 16:15:59 UTC
We used to have this. We removed it as it creates a security issue (a not-logged in user is able to interrupt the session of the running users).

Yes, sorry, the lock screen!

I understand, although the solution proposed by "avlas" seems reasonable and would be very useful...

https://bugs.kde.org/show_bug.cgi?id=390634#c2

Anyway, I think it could be better ...

Thank you for making me understand the reason, I suspected it was about security issues...

A workaround - loophole

You could click the 'Switch User':



You will get the SDDM greeter with all options - :




Note !

If you suspend from the SDDM greeter you will wake to the SDDM greeter. Do not log in twice. After suspend, at here (*), the SDDM greeter is in the second virtual console and the lock screen is in the first - Virtual console: https://en.wikipedia.org/wiki/Virtual_console

(*) At here:
Arch Linux
Plasma 5.12.4
KF 5.44.0

There are definitely workarounds, so calling this change a security fix is just security theater unless all of the workarounds are addressed (including the ability to hop over to a TTY session and hit ctrl+alt+delete to initiate a reboot without logging in).

On the other hand, calling the problem a "security" issue is hardly accurate unless it is unlocking other users sessions even temporarily so that an interrupted shutdown can allow one user to access other user's unlocked sessions. The worst one user could do by shutting down a system is prematurely closing open connections and discarding any unsaved data (which is only lost if the open application doesn't keep snapshots).

I think at a minimum, if there is only one session running then by all means present the restart/reboot buttons (the case in the majority of situations).
If there are multiple users with open (locked) sessions then require permission to close the other sessions (even if just prompting that there are other sessions open that will be closed as well, which I believe it already did).