LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 06-23-2004, 04:41 PM   #1
rfarma5
LQ Newbie
 
Registered: Apr 2004
Location: Maryland, USA
Distribution: Slack & Debian
Posts: 2

Rep: Reputation: 0
Xserver screen locking/virtual console security


I have done some searching around but have not been able to find a satisfactory answer to this question, perhaps due to the fact that I am not sure exactly what terms to use in my searching.

When you have not set up xdm, kdm, gdm, etc - and are just using the plain old text login, then using "startx" to begin your xsession, I seem to have found a security "issue" that I cannot find an answer for...
When using either xlock or kde's screen saver/Lock Desktop feature w/ password protection, if you push a button or move the mouse it will prompt for a password, however using the CTRL-ALT-F1 combination brings me to the tty0 where the X session was started from. I can then use Ctrl-Z to background the startx process and kill off the screensaver process, switch back to virtual console 7 and just like that I've defeated the "Lock Desktop" mechanism. At home this is not a concern, however at work I lock my computer every time I step away even for a moment, yet it seems to be wide open to any knowledgeable person.

If this is a common problem/issue that has already been addressed, please at least point me in the right direction, or at most tell me how to secure against this type of workaround.

Thanks
 
Old 06-23-2004, 05:27 PM   #2
ToniT
Senior Member
 
Registered: Oct 2003
Location: Zurich, Switzerland
Distribution: Debian/unstable
Posts: 1,357

Rep: Reputation: 47
Code:
startx &
disown
exit
or
Code:
startx
[Ctrl-Z]
bg
disown
exit
The disown command throws the child process (startx) out of the shell session so that it is not killed (with HUP) when the shell is closed. exit closes the shell.
(BTW: I'm assuming you are using bash.)
 
Old 06-23-2004, 05:36 PM   #3
rfarma5
LQ Newbie
 
Registered: Apr 2004
Location: Maryland, USA
Distribution: Slack & Debian
Posts: 2

Original Poster
Rep: Reputation: 0
indeed I am using bash... thanks for the answer, I'll have to give it a round and then see what I can make of turning it into a shell script so I don't have to do that every time.

Thanks
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
How to increase the screen resolution of the text console (No Xserver installed)? Akhran Debian 1 11-10-2005 03:32 PM
Locking the console -0- Slackware 3 05-23-2005 07:51 PM
Locking Console Screen for Slackware kemplej Linux - Security 1 06-14-2004 02:06 PM
strange screen when switch back from KDE to virtual console vu63 Linux - General 2 10-07-2003 08:10 AM
Locking a console Stephanie Linux - General 1 01-18-2002 10:53 AM


All times are GMT -5. The time now is 12:57 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration