Hibernate command very important security problem The 2019 Stack Overflow Developer Survey Results Are InHibernate and security considerationsHow to disable timeout of password prompt for partition decryption during boot?Resume from hibernate fails after image restorationWhy does resume from hibernation pause/hang?security issues from installing from source code as rootWhat is the threat of a user trying to sudo without permission?lock screen session suspension in debian jessieWhy my machine doesn't need a password on waking up from hibernate?Resuming Linux from hibernate on ThinkPad X220 fails with black screen or rebootHow can a Linux sound problem affect Windows in a dual boot configuration?
Why do UK politicians seemingly ignore opinion polls on Brexit?
Access elements in std::string where positon of string is greater than its size
Manuscript was "unsubmitted" because the manuscript was deposited in Arxiv Preprints
What does "sndry explns" mean in one of the Hitchhiker's guide books?
"What time...?" or "At what time...?" - what is more grammatically correct?
Why isn't airport relocation done gradually?
What are the motivations for publishing new editions of an existing textbook, beyond new discoveries in a field?
Does light intensity oscillate really fast since it is a wave?
Is three citations per paragraph excessive for undergraduate research paper?
Lethal sonic weapons
How to deal with fear of taking dependencies
Should I use my personal or workplace e-mail when registering to external websites for work purpose?
Why is my p-value correlated to difference between means in two sample tests?
What is the meaning of Triage in Cybersec world?
JSON.serialize: is it possible to suppress null values of a map?
Understanding the implication of what "well-defined" means for the operation in quotient group
Is there a name of the flying bionic bird?
Why is it "Tumoren" and not "Tumore"?
Spanish for "widget"
I looked up a future colleague on LinkedIn before I started a job. I told my colleague about it and he seemed surprised. Should I apologize?
Why is Grand Jury testimony secret?
How come people say “Would of”?
Springs with some finite mass
Are there any other methods to apply to solving simultaneous equations?
Hibernate command very important security problem
The 2019 Stack Overflow Developer Survey Results Are InHibernate and security considerationsHow to disable timeout of password prompt for partition decryption during boot?Resume from hibernate fails after image restorationWhy does resume from hibernation pause/hang?security issues from installing from source code as rootWhat is the threat of a user trying to sudo without permission?lock screen session suspension in debian jessieWhy my machine doesn't need a password on waking up from hibernate?Resuming Linux from hibernate on ThinkPad X220 fails with black screen or rebootHow can a Linux sound problem affect Windows in a dual boot configuration?
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty margin-bottom:0;
I use Debian 9 and use hibernate command very much.
Recently I give attention to how it is working and understand after I turn on PC and hibernate was restoring images and wakes up, it does not ask me for password and directly goes to last screen and tty (Active user session).
I think it is very important security problem, because may other people turn on PC after hibernate, and they get active session access!
I run hibernate command with following syntax:
sudo hibernate
How can I get hibernate, to lock PC before it hibernates?
debian security password hibernate
edited Apr 6 at 11:08
ctrl-alt-delor
12.4k52662
asked May 18 '18 at 14:54
Amir hossein KarimiAmir hossein Karimi
92
|
show 1 more comment
I use Debian 9 and use hibernate command very much.
Recently I give attention to how it is working and understand after I turn on PC and hibernate was restoring images and wakes up, it does not ask me for password and directly goes to last screen and tty (Active user session).
I think it is very important security problem, because may other people turn on PC after hibernate, and they get active session access!
I run hibernate command with following syntax:
sudo hibernate
How can I get hibernate, to lock PC before it hibernates?
debian security password hibernate
edited Apr 6 at 11:08
ctrl-alt-delor
12.4k52662
asked May 18 '18 at 14:54
Amir hossein KarimiAmir hossein Karimi
92
4
Have you enabled the system setting to ask for password after the screen wakes from sleep? Hibernation and Suspend should behave the same and require login.
– Sir_Scofferoff
May 18 '18 at 15:23
It sounds like you're not using whole-drive encryption, so even if there were a password prompt, it would be trivially bypassed. If you're really concerned about this, you need to enable that as well as fixing this.
– Joseph Sible
May 19 '18 at 16:36
@Sir_Scofferoff yes its turned on by default and when screen turn off or when sleep need password to show user session screen (user desktop).
– Amir hossein Karimi
May 31 '18 at 6:51
1
@JosephSible no drive encryption was not enabled but why i should do that? I think its a simple thing that system should ask for password after wake from hibernate and i think user does not do anything to get this feature.
– Amir hossein Karimi
May 31 '18 at 6:52
Because if you don't have encryption enabled, it's trivial to bypass all local password prompts, so much so that you may as well not have them.
– Joseph Sible
May 31 '18 at 11:49
|
show 1 more comment
I use Debian 9 and use hibernate command very much.
Recently I give attention to how it is working and understand after I turn on PC and hibernate was restoring images and wakes up, it does not ask me for password and directly goes to last screen and tty (Active user session).
I think it is very important security problem, because may other people turn on PC after hibernate, and they get active session access!
I run hibernate command with following syntax:
sudo hibernate
How can I get hibernate, to lock PC before it hibernates?
debian security password hibernate
edited Apr 6 at 11:08
ctrl-alt-delor
12.4k52662
asked May 18 '18 at 14:54
Amir hossein KarimiAmir hossein Karimi
92
I use Debian 9 and use hibernate command very much.
Recently I give attention to how it is working and understand after I turn on PC and hibernate was restoring images and wakes up, it does not ask me for password and directly goes to last screen and tty (Active user session).
I think it is very important security problem, because may other people turn on PC after hibernate, and they get active session access!
I run hibernate command with following syntax:
sudo hibernate
How can I get hibernate, to lock PC before it hibernates?
debian security password hibernate
debian security password hibernate
edited Apr 6 at 11:08
ctrl-alt-delor
12.4k52662
asked May 18 '18 at 14:54
Amir hossein KarimiAmir hossein Karimi
92
edited Apr 6 at 11:08
ctrl-alt-delor
12.4k52662
asked May 18 '18 at 14:54
Amir hossein KarimiAmir hossein Karimi
92
edited Apr 6 at 11:08
ctrl-alt-delor
12.4k52662
edited Apr 6 at 11:08
ctrl-alt-delor
12.4k52662
edited Apr 6 at 11:08
ctrl-alt-delor
12.4k52662
12.4k52662
asked May 18 '18 at 14:54
Amir hossein KarimiAmir hossein Karimi
92
asked May 18 '18 at 14:54
Amir hossein KarimiAmir hossein Karimi
92
asked May 18 '18 at 14:54
Amir hossein KarimiAmir hossein Karimi
92
92
4
Have you enabled the system setting to ask for password after the screen wakes from sleep? Hibernation and Suspend should behave the same and require login.
– Sir_Scofferoff
May 18 '18 at 15:23
It sounds like you're not using whole-drive encryption, so even if there were a password prompt, it would be trivially bypassed. If you're really concerned about this, you need to enable that as well as fixing this.
– Joseph Sible
May 19 '18 at 16:36
@Sir_Scofferoff yes its turned on by default and when screen turn off or when sleep need password to show user session screen (user desktop).
– Amir hossein Karimi
May 31 '18 at 6:51
1
@JosephSible no drive encryption was not enabled but why i should do that? I think its a simple thing that system should ask for password after wake from hibernate and i think user does not do anything to get this feature.
– Amir hossein Karimi
May 31 '18 at 6:52
Because if you don't have encryption enabled, it's trivial to bypass all local password prompts, so much so that you may as well not have them.
– Joseph Sible
May 31 '18 at 11:49
|
show 1 more comment
4
Have you enabled the system setting to ask for password after the screen wakes from sleep? Hibernation and Suspend should behave the same and require login.
– Sir_Scofferoff
May 18 '18 at 15:23
It sounds like you're not using whole-drive encryption, so even if there were a password prompt, it would be trivially bypassed. If you're really concerned about this, you need to enable that as well as fixing this.
– Joseph Sible
May 19 '18 at 16:36
@Sir_Scofferoff yes its turned on by default and when screen turn off or when sleep need password to show user session screen (user desktop).
– Amir hossein Karimi
May 31 '18 at 6:51
1
@JosephSible no drive encryption was not enabled but why i should do that? I think its a simple thing that system should ask for password after wake from hibernate and i think user does not do anything to get this feature.
– Amir hossein Karimi
May 31 '18 at 6:52
Because if you don't have encryption enabled, it's trivial to bypass all local password prompts, so much so that you may as well not have them.
– Joseph Sible
May 31 '18 at 11:49
4
4
Have you enabled the system setting to ask for password after the screen wakes from sleep? Hibernation and Suspend should behave the same and require login.
– Sir_Scofferoff
May 18 '18 at 15:23
Have you enabled the system setting to ask for password after the screen wakes from sleep? Hibernation and Suspend should behave the same and require login.
– Sir_Scofferoff
May 18 '18 at 15:23
It sounds like you're not using whole-drive encryption, so even if there were a password prompt, it would be trivially bypassed. If you're really concerned about this, you need to enable that as well as fixing this.
– Joseph Sible
May 19 '18 at 16:36
It sounds like you're not using whole-drive encryption, so even if there were a password prompt, it would be trivially bypassed. If you're really concerned about this, you need to enable that as well as fixing this.
– Joseph Sible
May 19 '18 at 16:36
@Sir_Scofferoff yes its turned on by default and when screen turn off or when sleep need password to show user session screen (user desktop).
– Amir hossein Karimi
May 31 '18 at 6:51
@Sir_Scofferoff yes its turned on by default and when screen turn off or when sleep need password to show user session screen (user desktop).
– Amir hossein Karimi
May 31 '18 at 6:51
1
1
@JosephSible no drive encryption was not enabled but why i should do that? I think its a simple thing that system should ask for password after wake from hibernate and i think user does not do anything to get this feature.
– Amir hossein Karimi
May 31 '18 at 6:52
@JosephSible no drive encryption was not enabled but why i should do that? I think its a simple thing that system should ask for password after wake from hibernate and i think user does not do anything to get this feature.
– Amir hossein Karimi
May 31 '18 at 6:52
Because if you don't have encryption enabled, it's trivial to bypass all local password prompts, so much so that you may as well not have them.
– Joseph Sible
May 31 '18 at 11:49
Because if you don't have encryption enabled, it's trivial to bypass all local password prompts, so much so that you may as well not have them.
– Joseph Sible
May 31 '18 at 11:49
|
show 1 more comment
0
active
oldest
votes
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "106"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f444629%2fhibernate-command-very-important-security-problem%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Unix & Linux Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f444629%2fhibernate-command-very-important-security-problem%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
4
Have you enabled the system setting to ask for password after the screen wakes from sleep? Hibernation and Suspend should behave the same and require login.
– Sir_Scofferoff
May 18 '18 at 15:23
It sounds like you're not using whole-drive encryption, so even if there were a password prompt, it would be trivially bypassed. If you're really concerned about this, you need to enable that as well as fixing this.
– Joseph Sible
May 19 '18 at 16:36
@Sir_Scofferoff yes its turned on by default and when screen turn off or when sleep need password to show user session screen (user desktop).
– Amir hossein Karimi
May 31 '18 at 6:51
1
@JosephSible no drive encryption was not enabled but why i should do that? I think its a simple thing that system should ask for password after wake from hibernate and i think user does not do anything to get this feature.
– Amir hossein Karimi
May 31 '18 at 6:52
Because if you don't have encryption enabled, it's trivial to bypass all local password prompts, so much so that you may as well not have them.
– Joseph Sible
May 31 '18 at 11:49