Bit of a red herring, actually. If I can walk up to your system, it won't
matter whether I can hit Ctrl-Alt-Bksp to get into your account or not. If I
have physical access to your box, I own it. Period.

Ric


> -----Original Message-----
> From: Mark Knecht [mailto:[EMAIL PROTECTED]
> Sent: Friday, November 14, 2003 11:51 PM
> To: Gentoo-User
> 
> On Fri, 2003-11-14 at 20:24, Andrew Gaffney wrote:
> > Mark Knecht wrote:
> > > Hi,
> > >    Found this issue and tried it twice tonight on two different
> > > machines.
> > >
> > >    With xscreensaver locked and waiting for your password, I walk up
> and
> > > hit Alt-Ctrl-Backspace. It kills X and drops me into the console as
> you.
> > > At this point I have your account.
> > >
> > >    I guess this is an XFree issue? Is there a way to configure XFree
> to
> > > not do this? Or is this an xscreensaver issue. Should it trap the key
> > > sequence and do nothing?
> > >
> > >    Is this a known bug? It seems quite dangerous to me.
> >
> >  From 'man XF86Config':
> >
> > Option "DontZap"  "boolean"
> >    This disallows the use of the Ctrl+Alt+Backspace sequence.  That
> sequence is normally
> >    used to terminate the X server.  When this option is enabled, that
> key sequence has no
> >    special meaning and is passed to clients.  Default: off.
> 
> OK, so that seems to work. Thanks.
> 
> Personally I think that this option should be on by default, but at
> least now I know.
> 
> Thanks,
> Mark
> 
> 
> --
> [EMAIL PROTECTED] mailing list



--
[EMAIL PROTECTED] mailing list

Reply via email to