Re: Re: Re: Re: Security Audit Request for Screenlocker Branch

2011-10-13 Thread Martin Gräßlin
On Wednesday 12 October 2011 19:38:11 Oswald Buddenhagen wrote: > On Wed, Oct 12, 2011 at 04:47:54PM +0200, Dario Freddi wrote: > > 2011/10/12 Martin Gräßlin : > > > ok I have been thinking about it and have a new proposal: > > > * writing a kded module to only handle the screen locking (grab keybo

Re: Re: Re: Security Audit Request for Screenlocker Branch

2011-10-12 Thread Oswald Buddenhagen
On Wed, Oct 12, 2011 at 04:47:54PM +0200, Dario Freddi wrote: > 2011/10/12 Martin Gräßlin : > > ok I have been thinking about it and have a new proposal: > > * writing a kded module to only handle the screen locking (grab keyboard and > > mouse) > > TBH, if you really care about not making the thi

Re: Re: Re: Security Audit Request for Screenlocker Branch

2011-10-12 Thread Dario Freddi
2011/10/12 Martin Gräßlin : > On Wednesday 12 October 2011 09:10:40 Oswald Buddenhagen wrote: >> > Of course KWin is a more complex application than others, but given >> > what we need in a screen locker the difference becomes marginal IMHO. >> >> yes. one should consider decoupling the greeter fro

Re: Re: Re: Security Audit Request for Screenlocker Branch

2011-10-12 Thread Martin Gräßlin
On Wednesday 12 October 2011 09:10:40 Oswald Buddenhagen wrote: > > Of course KWin is a more complex application than others, but given > > what we need in a screen locker the difference becomes marginal IMHO. > > yes. one should consider decoupling the greeter from the core engine. > > > > > I m

Re: Re: Security Audit Request for Screenlocker Branch

2011-10-12 Thread Oswald Buddenhagen
On Tue, Oct 11, 2011 at 06:30:40PM +0200, Martin Gräßlin wrote: > On Tuesday 11 October 2011 17:34:10 Oswald Buddenhagen wrote: > > on a more serious note, [h]ow do you handle the lock grace time? > > this is actually not affected by the changes. Dim Display and turning off the > screen are decoup

Re: Re: Security Audit Request for Screenlocker Branch

2011-10-11 Thread Martin Gräßlin
On Tuesday 11 October 2011 21:06:13 Alexander Neundorf wrote: > On Tuesday 11 October 2011, Martin Gräßlin wrote: > > On Tuesday 11 October 2011 16:06:11 Andras Mantia wrote: > > > From here: > > > "If KWin crashes without restarting privacy is leaked but the system is > > > hardly useable due to m

Re: Re: Security Audit Request for Screenlocker Branch

2011-10-11 Thread Martin Gräßlin
On Tuesday 11 October 2011 17:34:10 Oswald Buddenhagen wrote: > On Tue, Oct 11, 2011 at 03:55:15PM +0200, Thomas Lübking wrote: > > Am Tue, 11 Oct 2011 15:33:39 +0200 schrieb Torgny Nyblom : > > > Does this mean that I will be focred to use a screensaver with > > > password unlock? If so why is tha

Re: Re: Security Audit Request for Screenlocker Branch

2011-10-11 Thread Martin Gräßlin
On Tuesday 11 October 2011 17:47:13 you wrote: > Am Tue, 11 Oct 2011 17:00:46 +0200 > > schrieb Martin Gräßlin : > > that is a good suggestion. I will think about how I can add that. > > Though if someone breaks by crashing kwin he is also able to remove > > any log. So this could be just snakeoil.

Re: Re: Security Audit Request for Screenlocker Branch

2011-10-11 Thread Martin Gräßlin
On Tuesday 11 October 2011 16:33:39 you wrote: > Once the screen locker crashes, security must be assumed > broken (if only by visual access). > Therefore the locker must not crash full ack, we have to be at 0 crashes in KWin (which has to be our goal for Wayland anyway ;-) > and if it does, re-es

Re: Re: Security Audit Request for Screenlocker Branch

2011-10-11 Thread Martin Gräßlin
On Tuesday 11 October 2011 16:06:11 Andras Mantia wrote: > From here: > "If KWin crashes without restarting privacy is leaked but the system is > hardly useable due to missing window manager. This situation can savely > be ignored as a corner case as KWin normaly restart." > > This is not true, th

Re: Re: Security Audit Request for Screenlocker Branch

2011-10-11 Thread Martin Gräßlin
On Tuesday 11 October 2011 15:33:39 Torgny Nyblom wrote: > On Tuesday 11 October 2011 14.55.29 Martin Gräßlin wrote: > > On Monday 10 October 2011 20:02:07 Parker Coates wrote: > > > On Sun, Oct 9, 2011 at 14:02, Martin Gräßlin wrote: > > > > I want to request a security audit for the changes to en

Re: Re: Security Audit Request for Screenlocker Branch

2011-10-11 Thread Martin Gräßlin
On Monday 10 October 2011 20:02:07 Parker Coates wrote: > On Sun, Oct 9, 2011 at 14:02, Martin Gräßlin wrote: > > I want to request a security audit for the changes to ensure that the new > > implementation is as secure as the existing one and that I did not forget > > an important case which would