'Re: Security hole in MATE?'

[prev in list] [next in list] [prev in thread] [next in thread] 

List:       fedora-list
Subject:    Re: Security hole in MATE?
From:       Ed Greshko <ed.greshko () greshko ! com>
Date:       2021-11-27 10:32:45
Message-ID: d0673e45-2177-7692-f301-169033f133db () greshko ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


On 27/11/2021 18:08, Joachim Backes wrote:
> 
> 
> On 11/27/21 09:42, Ed Greshko wrote:
> > On 27/11/2021 16:08, Joachim Backes wrote:
> > > I'm running my F35 desktop with MATE. If I wake up after having suspended  the  \
> > > box  using  some  key,  no password is requested, whereas the Cinnamon (I used \
> > > it in F34) desktop requests  it.  This  Missing  password request  in  MATE  \
> > > seems  to  be  a  security  hole. 
> > > Your  opinion? 
> > 
> > When you say "suspended" do you mean the system has gone into suspend mode or \
> > just that the screensaver becam active?
> 
> Hi Ed,
> 
> I suspended my machine actively by "sudo systemctl suspend" before going to bed
> > Screensaver wakeup works as expected.
> > 
> > But I can't simulate a suspend to ram in a VM.
> > 
> > 

Well, I don't have mate on bare metal and suspend a VM doesn't work.

In the screensaver settings do you have "Lock Screen with System Sleep" enabled?

--
Did 황준호 die?


[Attachment #5 (text/html)]

<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <div class="moz-cite-prefix">On 27/11/2021 18:08, Joachim Backes
      wrote:<br>
    </div>
    <blockquote type="cite"
      cite="mid:3f8c7107-9443-2889-1da3-e45ed867ba3b@rhrk.uni-kl.de">
      <br>
      <br>
      On 11/27/21 09:42, Ed Greshko wrote:
      <br>
      <blockquote type="cite">On 27/11/2021 16:08, Joachim Backes wrote:
        <br>
        <blockquote type="cite">I'm running my F35 desktop with MATE. If
          I wake up after having suspended  the  box  using  some  key,  no
          <br>
          password is requested, whereas the Cinnamon (I used it in F34)
          desktop requests  it.  This  Missing  password
          <br>
          request  in  MATE  seems  to  be  a  security  hole.
          <br>
          <br>
          Your  opinion? </blockquote>
        <br>
        When you say "suspended" do you mean the system has gone into
        suspend mode or just that the screensaver
        <br>
        becam active?
        <br>
      </blockquote>
      <br>
      Hi Ed,
      <br>
      <br>
      I suspended my machine actively by "sudo systemctl suspend"  
      before going to bed
      <br>
      <blockquote type="cite">Screensaver wakeup works as expected.
        <br>
        <br>
        But I can't simulate a suspend to ram in a VM.
        <br>
        <br>
        <br>
      </blockquote>
    </blockquote>
    <br>
    Well, I don't have mate on bare metal and suspend a VM doesn't work.<br>
    <br>
    In the screensaver settings do you have "Lock Screen with System
    Sleep" enabled?<br>
    <br>
    <pre class="moz-signature" signature-switch-id="3890eb44-9703-445c-ac26-0879825820c1" cols="72">--
Did 황준호 die?</pre>
  </body>
</html>
[Attachment #6 (text/plain)]

_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure


[prev in list] [next in list] [prev in thread] [next in thread]
Configure | About | News | Add a list | Sponsored by KoreLogic