From kde-core-devel Tue Oct 11 13:33:39 2011 From: Torgny Nyblom Date: Tue, 11 Oct 2011 13:33:39 +0000 To: kde-core-devel Subject: Re: Security Audit Request for Screenlocker Branch Message-Id: <2042770.R41o76IxEb () explosive> X-MARC-Message: https://marc.info/?l=kde-core-devel&m=131834005121379 MIME-Version: 1 Content-Type: multipart/mixed; boundary="--nextPart3970409.MQAJSMSj8t" --nextPart3970409.MQAJSMSj8t Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="iso-8859-1" On Tuesday 11 October 2011 14.55.29 Martin Gr=E4=DFlin wrote: > On Monday 10 October 2011 20:02:07 Parker Coates wrote: > > On Sun, Oct 9, 2011 at 14:02, Martin Gr=E4=DFlin wrote: > > > I want to request a security audit for the changes to ensure that= > > > the new implementation is as secure as the existing one and that = I > > > did not forget an important case which would compromise the > > > security. > > >=20 > > > The general concept of the new screenlocker is described in the > > > wiki: > > > http://community.kde.org/KWin/Screenlocker > > >=20 > > >> Screensavers without Locking > > >> No valid use case: should no longer be supported. > >=20 > > Could you elaborate on this part? What is meant by "screensavers > > without locking"? >=20 > Just running the screen saver animation without locking the screen. T= hat is > moving the mouse deactivates the screensaver without asking for a pas= sword. Does this mean that I will be focred to use a screensaver with password= =20 unlock? If so why is that not a vaild usecase? It's what I use at home = all the=20 time. /Regards Torgny --nextPart3970409.MQAJSMSj8t Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.18 (GNU/Linux) iQEcBAABAgAGBQJOlEWzAAoJEG1SFv7g7oE7wv8IAMBZo/N9oStfhBbx5ePYSjos 8mR4gbUgcdMZj8QPXDqJHQr63mzh15JunwEwph2dR5dy4AyQ3qaPXKNpmfuT+2y7 Hq+2ser4r0vxzvFjf3LLtlGvOuWWi7eeG38YMmmlzePC67G+WudxrSktjjZtpz5y fXS/puHAMCH+Jx0q4NaoX7UzuK1ctzDa2QFzFDhauelqnpLB4j2rOGjzRBojrzmE pscnPAZPbhV+C6B+rmj/EkuZvC4ztx+V72Qkws0RdrvSlRdddLer66YMkzEk+i4R 5C5obZSGcj1hZzRlDKiEf6cv0m2ZRKtXnsuJBhxpThMX46j3XFFHz+XHE5+/ZoM= =jQGU -----END PGP SIGNATURE----- --nextPart3970409.MQAJSMSj8t--