From kde-core-devel  Tue Oct 11 16:07:16 2011
From: Martin =?ISO-8859-1?Q?Gr=E4=DFlin?= <mgraesslin () kde ! org>
Date: Tue, 11 Oct 2011 16:07:16 +0000
To: kde-core-devel
Subject: Re: Re: Security Audit Request for Screenlocker Branch
Message-Id: <7852052.dWxyHBlDMb () martin-desktop>
X-MARC-Message: https://marc.info/?l=kde-core-devel&m=131834928102500
MIME-Version: 1
Content-Type: multipart/mixed; boundary="--nextPart6629606.Vs8BRHUD3y"


--nextPart6629606.Vs8BRHUD3y
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="utf-8"

On Tuesday 11 October 2011 17:47:13 you wrote:
> Am Tue, 11 Oct 2011 17:00:46 +0200
>=20
> schrieb Martin Gr=C3=A4=C3=9Flin <mgraesslin@kde.org>:
> > that is a good suggestion. I will think about how I can add that.
> > Though if someone breaks by crashing kwin he is also able to remove=

> > any log. So this could be just snakeoil.
>=20
> He'll be able to click away the message, yes.
>=20
> But unless you intend to put a file into the users $HOME ... man:sysl=
og
> (crashing the screenlocker does not mean to raise privileges, you're
> pretty screwed in that case, but that's not a a kwin issue)
ok logging to syslog can be added, if we add a watch daemon it could go=
 there.

Cheers
Martin
>=20
> Cheers,
> Thomas
--nextPart6629606.Vs8BRHUD3y
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEABECAAYFAk6UabQACgkQqVXwidMiVrovAACdFlsJjSxgXg83W6PgCbmSIGBm
RuQAn3Xsh+MjBaFpLOuUJAjhgYUeAU/8
=x/DG
-----END PGP SIGNATURE-----

--nextPart6629606.Vs8BRHUD3y--