I believe this bug affects security, given that it is a failure of Ubuntu to 
perform a
"Session Lock".  E.g. this is from NIST Special Publication 800-53 (Rev. 4):

  https://nvd.nist.gov/800-53/Rev4/control/AC-11

  The information system:

    a. Prevents further access to the system by initiating a session lock
       after [Assignment: organization-defined time period] of inactivity or
       upon receiving a request from a user; and

    b. Retains the session lock until the user reestablishes access using
       established identification and authentication procedures.

The name has been changed from "Session Lock" to "Device Lock" in Rev 5
(draft, 2017), but it's still listed there for the sake of best practices.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1798615

Title:
  suspend does not lock in 18.04

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1798615/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to