Package: mate-screensaver Version: 1.20.3-3 Severity: normal When having configured time restricted access for some users for all services and the time restriction is working properly with login (testes with: lightdm, su, console login), the user can still unlock the screen being locked with mate-screensaver out of his allowed times. The configuration used for testing this issue in /etc/security/time.conf is:
*;*;<username>;Al0900-0901 pam_time is enabled through "common-auth" using: account required pam_time.so -- System Information: Debian Release: 10.7 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.19.0-13-amd64 (SMP w/4 CPU cores) Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=en_US.UTF-8, LC_CTYPE=de_AT.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages mate-screensaver depends on: ii dbus-x11 1.12.20-0+deb10u1 ii libatk1.0-0 2.30.0-2 ii libc6 2.28-10 ii libcairo-gobject2 1.16.0-4 ii libcairo2 1.16.0-4 ii libdbus-1-3 1.12.20-0+deb10u1 ii libdbus-glib-1-2 0.110-4 ii libgdk-pixbuf2.0-0 2.38.1+dfsg-1 ii libgl1 1.1.0-1 ii libglib2.0-0 2.58.3-2+deb10u2 ii libgtk-3-0 3.24.5-1 ii libice6 2:1.0.9-2 ii libmate-desktop-2-17 1.20.4-2 ii libmate-menu2 1.20.2-1 ii libmatekbd4 1.20.2-1 ii libnotify4 0.7.7-4 ii libpam0g 1.3.1-5 ii libpango-1.0-0 1.42.4-8~deb10u1 ii libpangocairo-1.0-0 1.42.4-8~deb10u1 ii librda0 0.0.5-1 ii libsm6 2:1.2.3-1 ii libstartup-notification0 0.12-6 ii libsystemd0 241-7~deb10u5 ii libx11-6 2:1.6.7-1+deb10u1 ii libxext6 2:1.3.3-1+b2 ii libxklavier16 5.4-4 ii libxss1 1:1.2.3-1 ii libxxf86vm1 1:1.1.4-1+b2 ii mate-desktop-common 1.20.4-2 ii mate-screensaver-common 1.20.3-3 ii mate-session-manager 1.20.2-1 Versions of packages mate-screensaver recommends: ii mate-power-manager 1.20.3-2 Versions of packages mate-screensaver suggests: pn rss-glx <none> pn xscreensaver-data <none> -- no debconf information
