Suspend button shown when screen is locked
When the screen is locked a suspend button is shown in the top right menu. It seems that tails doesn't normally allow suspend so this is at-best inconsistent. At worst it would allow an attacker to suspend the machine and then perform advanced forensic attacks later.
Personally I think that the regular shutdown and restart options should be available even if the screen is locked - this would allow for emergency situations.
#2 Updated by mercedes508 12 months ago
- Assignee set to Gaff
The suspend to ram feature will be implemented officially in Tails as described here: https://labs.riseup.net/code/issues/14556
And when the screen is locked the emergency shutdown feature works, so it's appropriate for emergency situations, right?
Hmm - well the odd thing is that when unlocked it shows "restart" and "power off". When it's locked it shows "pause". The difference is certainly unexpected!
I think it also presents a risk - the user would probably assume the machine was powered off rather than suspended and so might assume his machine was protected when it wasn't. I can see few upsides for allowing suspend.
- Status changed from New to Confirmed
- Assignee changed from Gaff to segfault
- QA Check set to Info Needed
- Type of work changed from User interface design to Code
Indeed, that's inconsistent. It would be nice to fix this if it's super cheap (and skip that otherwise because we'll soon have a suspend button in the regular session too so any change we make here will have to be reverted at some point). segfault, can you please have a quick look and tell me whether it's easy to fix it?
My 2 cents. I think that this behavior is inherited from GNOME.
In the context of GNOME, it makes sense to make it harder for someone who doesn't have the password to shutdown the system. Let's say you're in the library and lock your screen, you want to make it harder for someone else to shutdown your computer without your consent.
In the context of Tails, on the other hand, it makes sense to provide shortcuts to shutdown as a security feature.
So I wouldn't say that the UX problem here is inconsistency (because it makes sense in the context of GNOME in general) but yeah, it's more about the quick access to shutdown as a security feature :)
NB: Suspend to RAM already works on laptop. I use it all the time :)