Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 18 Jan 2012 20:53:40 -0500
From: Michael Gilbert <michael.s.gilbert@...il.com>
To: oss-security@...ts.openwall.com
Subject: Re: Screen locking programs on Xorg 1.11

On Wed, Jan 18, 2012 at 7:03 PM, Gu1 wrote:
> Hi,
> I recently found out that it is possible to kill a screensaver/screen
> locker program on the latest version of Xorg (1.11 shipped with
> archlinux, debian wheezy..) using the Ctrl+Alt+Multiply key binding.
>
> This behavior seems to have been introduced in a recent commit[1] and i
> couldn't find a way to disable it.
>
> All screen locking programs i tested (gnome-screensaver, kscreenlocker,
> slock, slimlock...), are basically rendered useless.
>
> Not sure if this is a bug or a feature... :)

All I can say is wow.  A key combo/code that reproducibly kills all
screen lockers is definitely *not* a feature.  This demonstrates the
importance of code review in critical code.  Nice find.

Best wishes,
Mike

Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ