Date: Wed, 18 Jan 2012 20:53:40 -0500 From: Michael Gilbert <michael.s.gilbert@...il.com> To: oss-security@...ts.openwall.com Subject: Re: Screen locking programs on Xorg 1.11 On Wed, Jan 18, 2012 at 7:03 PM, Gu1 wrote: > Hi, > I recently found out that it is possible to kill a screensaver/screen > locker program on the latest version of Xorg (1.11 shipped with > archlinux, debian wheezy..) using the Ctrl+Alt+Multiply key binding. > > This behavior seems to have been introduced in a recent commit and i > couldn't find a way to disable it. > > All screen locking programs i tested (gnome-screensaver, kscreenlocker, > slock, slimlock...), are basically rendered useless. > > Not sure if this is a bug or a feature... :) All I can say is wow. A key combo/code that reproducibly kills all screen lockers is definitely *not* a feature. This demonstrates the importance of code review in critical code. Nice find. Best wishes, Mike
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Powered by Openwall GNU/*/Linux - Powered by OpenVZ