Keyboard/Mouse activity can immediately unlock Keychain Access lock menu item

Originator:andrew.reitz
Number:rdar://29629070 Date Originated:12-Dec-2016 03:39 PM
Status:Open Resolved:
Product:macOS + SDK Product Version:10.12.1 (16B2555)
Classification: Reproducible:Yes
 
Area:
Screen Saver & desktop

Summary:
On macOS 10.12.1, I've noticed that if I use the "keychain status" menu item to lock my Mac, that erroneous keyboard or mouse activity can sometimes unlock my Mac.

Steps to Reproduce:
1. Launch Keychain Access, go to Preferences, and select "Show keychain status in menu bar".
2. In System Preferences, go to "Security & Privacy", and select "Require password _immediately_ after sleep or screen saver begins"
3. Go to the lock icon in the menu bar, and select "Lock Screen". The screen will begin fading to black.
4. Immediately generate some keyboard input (I find repeatedly striking "Enter" to be effective).
5. Over 50% of the time, my Mac will be unlocked.

Expected Results:
Choosing "Lock Screen" should result in my Mac being locked at the password prompt, 100% of the time.

Actual Results:
Choosing "Lock Screen" only results in a locked mac if I quiesce all input. I now need to verify that my Mac is really locked.

Version:
10.12.1 (16B2555)

Notes:
I don't have an Apple Watch, so I don't think my Mac is accidentally getting unlocked that way. I also haven't customized login with any U2F or other devices.

Configuration:
We have been able to reproduce this on a variety of MacBook Pros around the office. In my configuration, my early 2015 13" MacBook Pro is connected to an Apple Thunderbolt display and operating in lid-open mode (both displays active). In this configuration, the Thunderbolt display immediately goes black when clicking "Lock Screen", while the MBP display fades to black. Initiating keyboard input while fading to black is happening is the most likely way to trigger this bug, but I have successfully triggered it when both displays are dark (which normally indicates that the Mac is locked).

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!