[Pkg-xfce-devel] Bug#735854: Bug#735854: lightdm: "dm-tool lock" is easily circumvented

[Yves-Alexis Perez]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Control: severity -1 grave
On Fri, Jan 17, 2014 at 06:55:14PM -0500, Dylan Thurston wrote:
> Package: lightdm
> Version: 1.8.5-3
> Severity: normal
> 
> Dear Maintainer,
> 
> On my system, dm-tool lock is easily circumvented, to the point that I
> circumvented it without realizing that I was doing so. With my usual X
> session running on VT 7, "dm-tool lock" appears to open a new
> authentication window on VT 8; but takes no measures to prevent the
> user from switching back to the existing session on VT 7 with
> Ctrl-Alt-F7 and using the session.
> 
> (I do not have xscreensaver installed, in case that's relevant.)
> 
Yeah, it's actually a mistake to use dm-tool for now, since no locker
actually reacts to the signal (light-locker will do, but is not yet
available).

I need to rethink about that so we can be sure it doesn't cause issues
in some situation.

Regards,
- -- 
Yves-Alexis Perez
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBCgAGBQJS2kqoAAoJEG3bU/KmdcClzFkH/1VHOpLw5SIXUD3qVHJMQIgi
aGiWD3uWQiFqDdZ/V3lir0IrAzhU7D4OIWnspok9uE4dWVRCRHVZSOhlAgHTSQdV
3AiGmx2Gy4euiT3WSplashpLrGX9r5RhWk+BFHV87mx8xgfwEoO1BaMvcWo/tUYX
jZouNS1eXnS6Nt6UkYmEkpwRc5o+AfdL+CNRq4tTN2acP1cSxJvzydha82CBFzab
JEDB7stJXpHXBNzYj6EFzNPlK2aRgzE9leSDDvZxI6XFD8uZb2EEmNNgF2dkSP+c
ktvVgjWUUQU4KqGRJvXzzdPWwlV9azx25Hg9oBIq/G1k/Uf3FkmlYWa/gGZ/Lb0=
=z8zD
-----END PGP SIGNATURE-----