[Q] Security->"Automatically Lock" timeout in CM10 - HTC Rezound

I just installed a CM10 rom and I LOVE IT.. however I have one big issue that is hard to deal with. An app I have (lotus traveler) requires device administrator access, and it imposes a policy which says I have to have a password lock. In addition, I am allowed to have a lock timeout of at most 30 minutes before the password comes into effect.
On GB, ICS any phone this has always worked great. I set the timeout to 30 minutes. If I lock the screen, I just swipe to unlock. After the 30 minutes of being locked, a password must be entered to get past the lock screen.
On this ROM (and I have read all the others on JB?) there is no way to have a lock screen w/o a password. I think I can live with this. But I would really like to be able to set "lock timeout" to the 30 minute max policy provided by the software I installed.
Does anyone know what to hack & where to extend this to 30 minutes? I am rooted and unlocked of course. I have seen other JB phones (i.e samsung) showing screenshots with times up to 30 minutes.
Edit: should mention the MAX today is only 10 minutes. Also "lock delay" in the app store doesn't help if you have an app requiring password lock all the time.

It hasn't changed, you can still set the delay. Most ROMs it should be menu >Settings >Lockscreen >security, it something similar.
#BlameAnt

Using beanstalk here and 30 mins is the max option
Sent from my Rezound via Tapatalk

mjones73 said:
Using beanstalk here and 30 mins is the max option
Sent from my Rezound via Tapatalk
Click to expand...
Click to collapse
Dang! I wish I knew what to change in my rom to get that enabled (mine just goes from 30 seconds -> 10 minutes). I'm just using that "4th night nightlies" ROM "recovery-ra-vigor-3.16-gnm.img.zip".
demmo86rt -- Yeah I have the setting but it maxes out at 10 minutes. And when I do use it, it isn't like ICS/GB was... Before it used to be:
1) Using phone
2) screen goes off
3) Before the timeout, push unlock button
4) Screen comes on, lockscreen, swipe ring and unlock and go
5) If you wait till after the timeout, push unlock button, you must enter the PW first on the on screen keyboard
---- With JB ----
1) Using phone
2) Screen goes off
3) Before the timeout, push unlock button
4) Comes up to home screen. No lock screen protection
5) If you wait till after the timeout, push unlock button, you enter the PW ON the lockscreen and that clears it.
----------------------------------------------------------------------------------------------------------------
I'm fine either way but I would really like the timeout to be 30 instead of 10 minutes

kefler said:
Dang! I wish I knew what to change in my rom to get that enabled (mine just goes from 30 seconds -> 10 minutes). I'm just using that "4th night nightlies" ROM "recovery-ra-vigor-3.16-gnm.img.zip".
demmo86rt -- Yeah I have the setting but it maxes out at 10 minutes. And when I do use it, it isn't like ICS/GB was... Before it used to be:
1) Using phone
2) screen goes off
3) Before the timeout, push unlock button
4) Screen comes on, lockscreen, swipe ring and unlock and go
5) If you wait till after the timeout, push unlock button, you must enter the PW first on the on screen keyboard
---- With JB ----
1) Using phone
2) Screen goes off
3) Before the timeout, push unlock button
4) Comes up to home screen. No lock screen protection
5) If you wait till after the timeout, push unlock button, you enter the PW ON the lockscreen and that clears it.
----------------------------------------------------------------------------------------------------------------
I'm fine either way but I would really like the timeout to be 30 instead of 10 minutes
Click to expand...
Click to collapse
Yeah, that's how mine is on LiquidSmooth (with all the options up to 30 min). I normally don't use lockscreen security, but I enabled it after reading this post to see how it worked. I do like the delay, but would rather have the regular swipe to unlock before the timeout. The main reason I don't use the security is because it irritates me to always put in the stupid pattern, but I don't like it waking straight to the homescreen, too much chance of something opening up in my pocket.
#BlameAnt

demmo86rt said:
Yeah, that's how mine is on LiquidSmooth (with all the options up to 30 min). I normally don't use lockscreen security, but I enabled it after reading this post to see how it worked. I do like the delay, but would rather have the regular swipe to unlock before the timeout. The main reason I don't use the security is because it irritates me to always put in the stupid pattern, but I don't like it waking straight to the homescreen, too much chance of something opening up in my pocket.
#BlameAnt
Click to expand...
Click to collapse
Maybe I should go post this back in the forum thread for the ROM I installed.. I bet it's something that can be changed.
Yeah the "waking up straight to homescreen" is a new thing I found in JB.. It never worked like this before. I think the issue is android developers don't typically have to deal with the corporate security requirements.. Thats the only reason I have to have a password, it is required by the application that is installed.

SOLVED!
kefler said:
I just installed a CM10 rom and I LOVE IT.. however I have one big issue that is hard to deal with. An app I have (lotus traveler) requires device administrator access, and it imposes a policy which says I have to have a password lock. In addition, I am allowed to have a lock timeout of at most 30 minutes before the password comes into effect.
On GB, ICS any phone this has always worked great. I set the timeout to 30 minutes. If I lock the screen, I just swipe to unlock. After the 30 minutes of being locked, a password must be entered to get past the lock screen.
On this ROM (and I have read all the others on JB?) there is no way to have a lock screen w/o a password. I think I can live with this. But I would really like to be able to set "lock timeout" to the 30 minute max policy provided by the software I installed.
Does anyone know what to hack & where to extend this to 30 minutes? I am rooted and unlocked of course. I have seen other JB phones (i.e samsung) showing screenshots with times up to 30 minutes.
Edit: should mention the MAX today is only 10 minutes. Also "lock delay" in the app store doesn't help if you have an app requiring password lock all the time.
Click to expand...
Click to collapse
Not sure if you found a solution, but I had the exact same problem.... until I found this post on another site. (Updated) - It did NOT work for me in the end. Seems to work for Moto users, but not for various Samsung users (I'm on Cyanogenmod 10.2, but tried the other versions to no avail).
Cheers
This behavior is affected by two different settings:
<Menu> -> System Settings -> Security ->Automatically Lock
<Menu> -> System Settings -> Display -> Sleep.
The administrator policy requires a 30-minute maximum timeout for the combination of both the Display Sleep and Automatically Lock. If you see "Immediately" as the only option for Automatically Lock then your Display Sleep timer is set to 30 and won't allow any time left for automatic lock.

Related

Getting rid of the Auto-Lock feature?

Is there any way to change a setting or something so that the phone never locks by itself? I hate when I leave my phone sitting for a moment and then it locks by itself.
Also, when the phone is locked and then you press the home button, the screen stays on for ages - is there any way to change it so that it only stays on for 5 or 10 seconds (like an iPhone)?
Cheers
You should be able to go into settings/personal password (or similar) & set "screen unlock security" to none/disable personal password security.
Yes. Get an iPhone (You walked into that one). In all seriousness, it's been a while since I've run stock on my phone, but from memory you *should* (not 100% sure tho) set the screen timeout in the display settings to 15 seconds or similar.
Hmm there was no setting there... I've already got lock screen turned off but that doesn't make a difference..
Is there a way to do it with a custom ROM? I need to get a deodexed ROM anyway so I can run Jkay's theme.. any suggestions of which ROM to run?
In hyperdroid there is an option to change how soon the lockscreen activates after the screen turns itself off via screen timeout, as apposed to when you turn the screen off via pressing the power button.
This may also be the case in newer stock roms, I am not sure.
Its in
Settings > Timeout (Under "Screen unlock settings")
Also in
Settings > Display you can change the scree timeout delay (aka how fast it auto turns off)
just put a long cooldown on the lock? swiping of an image is not that bad is it?

Screen lock randomly not working?

I noticed today that my screen lock isn't working most of the time. Anyone else having this problem? I've tried resetting it without luckluck
Sent from my SAMSUNG-SGH-I717 using xda premium
If you mean using a PIN or pattern then yes, I have noticed this. If you set a PIN and lock the screen manually (pressing the power button) then it should require a PIN to unlock the screen, but it does not. It still does if the timer setting expires but it should require a PIN anytime you lock the screen. This is the same security bug that the skyrocket had. You can bypass the bug by setting the timer to immediate but that is such a pain to put in your in your PIN every time the screen times out...
planoman said:
If you set a PIN and lock the screen manually (pressing the power button) then it should require a PIN to unlock the screen, but it does not. It still does if the timer setting expires but it should require a PIN anytime you lock the screen.
Click to expand...
Click to collapse
That's not a bug in either phone. Do you want to enter your pin every time you accidentally hit the power button? You don't have to set the timer to expire immediately, just set it fairly low.
techntrek said:
That's not a bug in either phone. Do you want to enter your pin every time you accidentally hit the power button? You don't have to set the timer to expire immediately, just set it fairly low.
Click to expand...
Click to collapse
Accidentally press the power button? I have never done that. I understand about the timer, but it should require a PIN if you lock the phone with the button. I tested this on my International GNote and my skyrocket (after the security fix) and they both work as they should...if it is not a bug it is not the same as the other Samsung phones running touchwiz 4. It is not a big deal but it does exit.
Edit: It was the SGSII on ATT not the skyrocket with the security bug.
The timer is there for this purpose:
* for most ppl who like the convienence of not to use PIN all the time, timer is a great feature. You only need PIN when you let it idle for a while.
* for those paranoid, set the timer to immediate and you get what you want.
There is no security issue. It's a new feature introduced in GB.
Remember, for most ppl, power button is a key/screen touch lock so that they can safely pocket the phone without worrying about butt dialing.
Bingo. You get the best of both worlds depending on your needs. I'm very happy mine doesn't lock right away.
planoman - don't worry, you'll hit the power button. In landscape mode it is right where your fingers sit (or if you have it the other way the volume button is right there).
Let me make this easier:
1. It is not a big deal.
2. It is not that way on my skyrocket or International GNote which have GB.
3. I understand about the timer. It works fine once the time set elapses.
4. If you want to lock the phone by intentionally pressing the power button to lock you phone before the timer kicks in, it will not lock.
5. The ATT Galaxy S II launched with the same thing and everyone called it a security flaw
http://articles.businessinsider.com/2011-09-30/tech/30228702_1_samsung-flaw-timeout
planoman said:
4. If you want to lock the phone by intentionally pressing the power button to lock you phone before the timer kicks in, it will not lock.
Click to expand...
Click to collapse
Hence you didn't under stand the timer at all. There are two timers: screen timer and lock timer. Don't confuse the two.
Let me make it easier for you to understand, the purpose of lock timer is to enable the lock screen when your phone idles pass the timer. Hit power button mearly inidcates that you are indeed put the phone into idle state, not start lock the phone. The actual lock won't be required until the timers elapses. This is a convienence feature so that more ppl will use the PIN lock on their phone (a good thing). A lot of ppl I know don't use PIN lock simply because they don't want to be bothered to entry PIN every 5 seconds. Yes, most ppl use power button to turn off the screen to save battery as well as avoid unintentional action on the phone. They don't use power button to LOCK the phone.
Since you like to use power button to LOCk the phone, you should set the timer to immdiate and call it a day.
5. The ATT Galaxy S II launched with the same thing and everyone called it a security flaw
http://articles.businessinsider.com/2011-09-30/tech/30228702_1_samsung-flaw-timeout
Click to expand...
Click to collapse
The reporters who called it security flaw don't understand the issue at all just like you. IIRC, BGR is the first one posted such thing. And we all know how BGR is ALWAYS correct on Android stuff
The bug in SG2 is rather a UI bug. Instead of showing you a normal swipe to unlock screen, it showed a pattern unlock screen but the underlying code works correctly (it doesn't need unlock pattern at that time). Hence it throw everyone off. The UI bug has been fixed in 2.3.6 update but the timer feature still works as it should.
foxbat121 said:
Hence you didn't under stand the timer at all. There are two timers: screen timer and lock timer. Don't confuse the two.
The reporters who called it security flaw doesn't understand the issue at all just like you. IIRC, BGR is the first one posted such thing.
The bug in SG2 is rather a UI bug. Instead of showing you a normal swipe to unlock screen, it showed a pattern unlock screen but the underlying code works correctly (it doesn't need unlock pattern at that time). Hence it throw everyone off. The UI bug has been fixed in 2.3.6 update but the timer feature still works as it should.
Click to expand...
Click to collapse
You know that feeling when you know you are right and someone is trying to argue a point and they just don"t get it? yeah..I have that feeling right now. Give it up. I know exactly what I am talking about.
If this was not a problem why did Samsung release a statement on it and deploy a fix for the ATT SGSII? It was for pattern lock ot PIN lock. Just because you do not use the phone like that does ot mean it is working as it should. Have you tried it on any other Samsung phones? I have stated that I tried it on two other Samsung phone running 2.3.6 and you are still arguing...
Stop trying to prove a point that cannot be proven. It is a bug, it is not designed to work that way and if you never ever want to intentionally lock your phone BEFORE the lock timer elapses then great! No problem for you!
From Android Central:
http://www.androidcentral.com/major-security-flaw-found-atts-upcoming-samsung-galaxy-s-ii-device
Please, Android central simple reposted the same thing from other blogs. They all do the same reposting each other without thinking. So, that's not really any proof.
This has been discussed throughly in the SGS2 forum.
The fact remains, most of us think power button not as lock button but you do. That's the only difference. And the current implementation benifits both sides. That's the point.
I understand what you are saying perfectly. I do use a PIN I have the lock timer set to ten miuntes for the reasons you stated. Normally I do not want to enter my PIN code every time...that said, there are times when I do want to hit the power button to shut the screen off or lock the phone BEFORE the 10 minutes will elapse. An example would be at home when I set my phone down so that if my kids grab it they cannot hit the power button and I come back to a screen that has my icons rearranged or missing etc. Or at a meeting in a conference room when I leave my phone sitting in the room or bag for a break etc, I usually do lock the phone just in case some one picks up my phone or worse steals it. They just need to touch the screen every nine minutes and they will have access to all of my stuff.
I get your points and do understand. My point was just because many do not use the power or lock button to intentionally lock the screen, does not mean the ATT Gnote is funtioning as designed or at least other Samsung phones with 2.3.6 and touchwiz.
So OP, it this what you were speaking of or did we miss your point entirely?
I use power button to turn off screen almost exclusively. Rarely I ever let screen timeout to turn the screen off for me. I'd be really pissed and call BUG if power button immediately lock the phone. My lock time out is set to 30 minutes so that I don't need to enter PIN in normal situations but have a piece of mind if I left my phone somewhere, it will be locked after 30 minutes.
In the old Windows Mobile days, you can hit power button the turn off the screen but you also can press and hold End Call button to lock the phone. Two separate buttons for two separate functions.
That is how my other two Sammy are as well as my captivate, og atrix, attic 2 were.
You could always set you screen timeout to 15 seconds.
Sent from my SAMSUNG-SGH-I717 using XDA App
planoman said:
You could always set you screen timeout to 15 seconds.
Click to expand...
Click to collapse
Then I will not use a PIN lock at all. 15 seconds means I have to use PIN all the time.
foxbat121 said:
Then I will not use a PIN lock at all. 15 seconds means I have to use PIN all the time.
Click to expand...
Click to collapse
Only if you press the power button. If the screen times out at 15 seconds, the pin lock timer kicks in which for you is 30 minutes. Your lock screen works regularly unless you press the power button to turn off and "lock" the screen.
Sent from my SAMSUNG-SGH-I717 using XDA App
planoman said:
Only if you press the power button. If the screen times out at 15 seconds, the pin lock timer kicks in which for you is 30 minutes. Your lock screen works regularly unless you press the power button to turn off and "lock" the screen.
Sent from my SAMSUNG-SGH-I717 using XDA App
Click to expand...
Click to collapse
You are right. I mis-read. I'm already on 15-sec screen time out. It is still too long for me when I'm done using the phone and need to put into my pocket.
Then add a small app to your home screen which will give you 1-touch phone lock. https://market.android.com/details?id=com.droidmania.lockscreenwidget&feature=search_result
There are many others - some appear to lock and shut the screen down, some just lock.
I'm pretty sure this isn't a bug, I think they just changed the way the phone is designed to lock. My captivate always locked when you pushed the button right away, I like the way it works in my Note a lot better as I will push the button by accident or habit and realize I didn't finish what I was doing. My timeout is only like 15 seconds though.
camaroz28 said:
I'm pretty sure this isn't a bug, I think they just changed the way the phone is designed to lock. My captivate always locked when you pushed the button right away, I like the way it works in my Note a lot better as I will push the button by accident or habit and realize I didn't finish what I was doing. My timeout is only like 15 seconds though.
Click to expand...
Click to collapse
The new time out features are introduced in GingerBread. So, I'm sure the Captivate with the new GB udpate will have the similar feature now.
They may have changed it, but as you said it is not the way other Samsung phones have been. Not a big deal for me, but I wanted folks who have like a 30 minute timer on the lockscreen to know their phone is not locked when they use the power button to turn off the screen like it would have been with other Samsung phones.
Sent from my SAMSUNG-SGH-I717 using XDA App

Lock screen without PIN?

I have to use an 8 digit alphanumeric passcode due to my company's security requirements. This unlocking is a pain. However, locking the phone (to prevent butt dialing, etc) is nice to have.
On the Motorola DROID you could lock the phone with the power button, but wouldn't be prompted for the PIN unless you had the screen off for over 29 minutes (or whatever time up to 29 minutes that you'd set). If you woke the phone before 29 minutes, you wouldn't get the PIN prompt... You would only swipe to wake. This is what I want on the Note 2 but can't find a way to do it.
In other words, if I wake the phone within 29 minutes, I want the phone to lock, but I only want to swipe to unlock. I don't want the Pin prompt within 29 mins.
Doesn't seem like this combo is possible on the Note 2. I seem to be able to lock with the Pin instantly or no lock at all until you hit the set time threshold with the screen off.
Any ideas?
Sent from my SCH-I605 using Tapatalk 2
I have mine set up similar to how you describe, but without the swipe to unlock in the 29 minute window (not sure that is possible)...go Settings > Lockscreen. Choose Screen Lock with PIN and make sure the Lock Automatically with power key is unchecked. Then go into Lock Automatically and choose 30 min. Now you should be able to turn the screen off with the power button and wake it up anytime within 30 min without the PIN. Only caveat is that for some reason missed calls lock the screen regardless of how long it has been, but that is a small issue.
I don't think there's a way to 'layer' the lock screens with an admin exchange account forcing a PIN...would be nice though. I didn't realize the 'missed call bug'...interesting and probably explains why my phone occasionally locks within the 30 minute timeout.

[Q] Lock the phone right away when using lock delay

Hi,
On my LG Nexus 5, I have setup a delay for the lockscreen to 2 minutes after the phone is not in use. This is also true for when I turn off the screen with the power button (the phone will only lock 2 minutes later). I love this feature as I don't have to input my password too often when, for example, I turn the screen off and realize I forgot to check something. I just press the power button again and the phone is unlocked (if done within 2 minutes).
My questions is how can I lock my phone immediately without changing the 2-minute setting? In some cases, I would like the phone to lock immediately. Does anyone know how to do this without installing some new app on my phone? And if this is not possible, can you recommend an app that would allow me to lock my phone right away (for example when I tap an icon or something)?
Thanks!

Timeout: Power button to unlock timeout extend

With the S9+ powered up but the screen black: Press power button and I get the PIN screen as I have selected. In 3 seconds, the screen goes dark again. Can this be extended? The timeout is too short to read notifications before it goes black.
I am not referring to the screen timeout that is easily modified in settings.
Thanks (sorry if this is a dup - I did search)
Answer: 3 seconds is the built-in value
I had a chat session with Samsung and they confirmed that the built-in timeout is 3 seconds and can't be changed. That is the answer.
FYI: They have a very nice tool that allows them to take over your phone and you can watch them work.
Use Case
1. Phone is booted up, uses a pattern to unlock, allows notifications on the lock screen, has 30 second timeout (example)
2. Screen is black
3. Press Power button
4. You get the unlock screen and any notifications that exist - possibly many of them. This is allowed in the notification and lock screen settings
5. You start to read through the notifications to see if there are any that need attention and if not, you just put the phone down
6. In 3 seconds from the point when you get the lock screen and notifications, the screen goes black again unless you do something
The point is that you should be able to set a longer time (e.g., 15 seconds) for the screen to stay on before it goes black. That way you could review the notifications to see if you really want to log in and do something. This would not appear to be a security problem since the phone is still locked.
This is the way it is designed - working as designed per Samsung.
fyi
scott
There seems to be a work around. If you turn on face unlock, but don't point it at your face, it seems the lock screen will stay on and keep trying to find your face. Of course, you may not want to use face unlock.

Categories

Resources