xlock insecure...

Synesthesia · 02-04-2006, 09:37 PM

I just realized there is a huge security flaw in xlock (hopefully just the version I have). It's purpose is to lock x windows when your away. The problem is that you can just hit ctl-alt-backspace, and your in! I would appreciate responces with solutions. Thanks.

Matir · 02-04-2006, 10:27 PM

While this is in reference to XScreenSaver, it also applies to xlock: http://www.jwz.org/xscreensaver/faq.html#no-ctl-alt-bs

Synesthesia · 02-04-2006, 10:57 PM

I can't disable it for xlock without disabling system wide? I would like to be able to kill xwindows if it freezes...

Synesthesia · 02-04-2006, 11:09 PM

You can also bypass xlock by using ctl alt f1. Is there a way to disable that in xlock without disabling it out of xlock (for it is very useful, and being handicapped just because I use xlock is stupid.

This may be for no reason because this can all be accomplished by: exiting to tty0 and logging out, and then logging in and using alt f7........

frob23 · 02-04-2006, 11:13 PM

Wait, did you say that ctl-alt-bkspace kills xlock but returns you to your logged in state? Or does it kill X and bring you back to a login prompt?

These are two different things...

If you're using startx, try
startx ; logout

That way, when you exit X you're logged out automatically. So no one can kill X and be logged in as you.

Synesthesia · 02-05-2006, 12:36 AM

Quote:

Originally Posted by frob23

Wait, did you say that ctl-alt-bkspace kills xlock but returns you to your logged in state? Or does it kill X and bring you back to a login prompt?

These are two different things...

If you're using startx, try
startx ; logout

That way, when you exit X you're logged out automatically. So no one can kill X and be logged in as you.

Just what I was looking for, thanks.