[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-usability
Subject:    Re: FIXED: Secure Screen Locking
From:       Eron Lloyd <elloyd () lancaster ! lib ! pa ! us>
Date:       2003-08-15 14:37:12
[Download RAW message or body]

On Thursday August 14 2003 7:03 pm, Aaron J. Seigo wrote:
> On Thursday 14 August 2003 04:11, Eron Lloyd wrote:
> > Oops...end of the day mistake. Here is the final file instead, fixing
> > item # 3.
>
> interesting idea... i'd suggest that the failed attempts should not be
> shown on-screen by default (in case you had simply mistyped your password
> by one keystroke; don't want that shown).. perhaps a "Show Failed Attempts"
> button that expands to show the table of failed attempts...

Good idea...someone could figure out a pattern if they were overlooking your 
shoulder.

> also, for TRULY paranoid installations it would be nice if it were optional
> put it into "failed attempts == locked out" mode that cooperated with PAM's
> tallying module, such that if the logins exceed the set maximum #, then it
> notes the user has been locked out and asks for root's password to unlock
> the account...

Great idea. I guess we'd be looking at a KControl module for it, then.

> perhaps simply adding a UI frontend for PAM's optional tally module would
> be the best way of implementing it in general?

I have to admit I'm not that familiar with PAM. Is PAM something we can 
reliabily expect all workstations to have? As long as there is a workaround 
for external dependancies as well, I guess it wouldn't be a problem...

Eron

-- 
Eron Lloyd
Technology Coordinator
Lancaster County Library
elloyd@lancaster.lib.pa.us
Phone: 717-239-2116
Fax: 717-394-3083

---
[This E-mail scanned for viruses by Declude Virus]

_______________________________________________
kde-usability mailing list
kde-usability@mail.kde.org
http://mail.kde.org/mailman/listinfo/kde-usability
[prev in list] [next in list] [prev in thread] [next in thread]