Hi!
Sorry if somebody has noticed this before or is only a stupid remark, but
a few days ago I found that you can kill vlock (and similar programs that
lock all linux consoles) with the alt+sysrq+k key combination on LiNUX 2.2.X
and 2.3.X (if you enabled magic keys when you compiled the kernel) so
someone could bypass the console locking and althought he cannot access the
session where vlock was ejecuted (because it has been killed), he can access
the other posibly opened sessions on other consoles. So, if you have enabled
the magic keys, using "vlock -a" is not secure!.
--
Saludos del General...
_______ _ .-.-. .-. .-.---.---. --------- Coordinador de LiMA ---------
( ____ ) \| | | | | | | ) _ ) Asociación de usuarios de LiNUX de Málaga
| |_ / _ \ | |_| \_/ | \ _) http://iaeste.cie.uma.es/lima
| _ )/_/ \_\|___)\___/|_|\_\___) -----------------------------------------
| |Correo-E: <[EMAIL PROTECTED]> LiNUX Reg. User #58539
|_|Web: http://moon.inf.uji.es/~luismc failure en IRC-Hispano
PGP keyID's: 0x6848D470 (DSS) / 0x255E9505 (RSA)
PGP signature
