Package: xserver-xorg Version: 6.9.0.dfsg.1-3 Severity: wishlist Tags: patch
Here is a patch to improve the xorg.conf.5x man page. The manual should mention the API that display-locking programs should use to disable the grab-killing keys, that are enabled with AllowDeactivateGrabs and AllowClosedownGrabs.
--- /dev/fd/63 2006-01-12 19:26:50.651879536 +0000 +++ xorg.conf.5x 2006-01-12 19:26:46.000000000 +0000 @@ -633,15 +633,17 @@ .BR XGrabServer(3x) Xlib function. Default: off. -.br -Note that the options +.PP +.B Important security note. +The .B AllowDeactivateGrabs and .B AllowClosedownGrabs -will allow users to remove the grab used by screen saver/locker programs. -An API was written to such cases. -If you enable this option, make sure your screen saver/locker is updated. -Default: off. +options allow clients to remove the grab used by screen saver/locker programs. +Such programs can prevent this by using the +.BR XF86MiscSetGrabKeysState(3x) +Xlib function. If you enable these options, make sure your screen saver/locker +has been updated. .TP 7 .BI "Option \*qHandleSpecialKeys\*q \*q" when \*q This option controls when the server uses the builtin handler to process
