Package: xautolock
Version: 1:2.2-7
Severity: critical
Tags: security

This is not software you can rely on to lock your screen:

```
lotus:~% xautolock -locknow
Could not locate a running xautolock.
lotus:~% ps aux | grep '[x]autolo'
madduck   172688  0.0  0.0   6584  2756 ?        S    Oct23   0:34 xautolock 
-time 3 -locker exec /usr/bin/xsecurelock -notify 30 -notifier notify-send 
Locking the screen in 30 seconds
```

Strace didn't disclose any file the process might be looking for.

-- System Information:
Debian Release: bookworm/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 6.0.0-rc7-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=en_NZ, LC_CTYPE=en_NZ.UTF-8 (charmap=UTF-8), LANGUAGE=en_NZ:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages xautolock depends on:
ii  libc6     2.35-3
ii  libx11-6  2:1.8.1-2
ii  libxext6  2:1.3.4-1+b1
ii  libxss1   1:1.2.3-1

Versions of packages xautolock recommends:
pn  xtrlock | xscreensaver | i3lock | suckless-tools  <none>

xautolock suggests no packages.

-- no debconf information


-- 
 .''`.   martin f. krafft <madduck@d.o> @martinkrafft
: :'  :  proud Debian developer
`. `'`   http://people.debian.org/~madduck
  `-  Debian - when you have better things to do than fixing systems

Reply via email to