kov changed gksu/trunk/ChangeLog, gksu/trunk/man/gksu.1

Gustavo Noronha kov at alioth.debian.org
Tue May 19 01:16:36 UTC 2009


Mensagem de log: 
Explain that locking keyboard does not guarantee security

-----


Modified: gksu/trunk/ChangeLog
===================================================================
--- gksu/trunk/ChangeLog	2009-05-10 02:07:13 UTC (rev 860)
+++ gksu/trunk/ChangeLog	2009-05-19 01:16:35 UTC (rev 861)
@@ -1,3 +1,9 @@
+2009-05-18  Gustavo Noronha Silva  <kov at debian.org>
+
+	* man/gksu.1: - half-accepted patch from Timo Juhani Lindfors
+	<timo.lindfors at iki.fi> to explain more clearly that the "locking"
+	of the screen does not guarantee safety
+
 2009-03-04  Gustavo Noronha Silva  <kov at debian.org>
 
 	* Release 2.0.2

Modified: gksu/trunk/man/gksu.1
===================================================================
--- gksu/trunk/man/gksu.1	2009-05-10 02:07:13 UTC (rev 860)
+++ gksu/trunk/man/gksu.1	2009-05-19 01:16:35 UTC (rev 861)
@@ -36,6 +36,14 @@
 program will display a small window that allows you to type in a
 command to be run, and to select what user the program should be run
 as. The other options are disregarded, right now, in this mode.
+.PP
+.B gksu
+tries to "lock" the keyboard, mouse and focus to prevent other
+applications from being able to read the password by eavesdropping the
+X connection. However, this is not enough to ensure 100% protection,
+since malicious applications can still use tracing calls such as
+ptrace() to capture the password. See Debian bug #474024 for more
+info.
 .SH OPTIONS
 \fB\-\-debug\fR, \fB\-d\fR
 .IP




More information about the gksu-commits mailing list