[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-devel
Subject:    Re: Security hole (or feature ;) in KDE Screensavers
From:       Christian Esken <c.esken () cityweb ! de>
Date:       1999-10-17 11:15:10
[Download RAW message or body]

On Sam, 16 Okt 1999, Markus Goetz wrote:
> Hi,
> 
> when i use a screen saver to protect my computer while i am away, anybody who
> wants to acess my computer needs the password.
> 
> But this is really NO PROTECTION ... if i do a startx from tty1, my X11 is on
> tty7 .. The one who wants acess to my account when i am away from my desktop
> does just have to press CTRL+ALT+F1, then he gets to the X11 Output where i
> used startx to start X11... so now he just has to press CTRL+C to kill X11 and
> has acess to my account and may type rm -rf $HOME ...

It's your own fault, if you configure your system badly. Just disallow the console
switching in the XFree config.

  Christian

--
Is Unix ready for the desktop? See http://www.kde.org

The                              Christian Esken
|/  Desktop                      KDE Developer
|\  Environment                  esken@kde.org

KDE - The net transparent free Unix Desktop for everyone

[prev in list] [next in list] [prev in thread] [next in thread]