Re: [e-users] Enlightenment DR 0.22.2 Release

[Simon Lees]

On 23/03/18 02:09, Pau Espin Pedrol wrote:
> 2018-03-21 8:24 GMT+01:00 Simon Lees :
> 
>> Be aware that this release has issues with the lock screen not
>> unlocking, we are working on a fix and 0.22.3 will be out in the coming
>> days fixing this issue.
>>
> 
> Until then, the only way to recover your session right now, as posted in
> archlinux issue tracking the upstream one, is to go to a console (CTRL+F2)
> and "kill -SIGSEGV enlightenment" , at which point the "white screen of
> death" will appear and after resuming from it, the screenlock will be gone.
> 
> Which makes me think, is this a desired behaviour too? After killing
> enlightenment and resuming the session, shouldn't it return automatically
> to the screenlock if it was in that state? Looks like a security issue for
> me. Imagine I have a terminal emulator with "su root" inside enlightenment,
> and I also have a terminal opened in CTRL+F2 with my unprivileged user. If
> I leave my PC unattened, somebody could access my user through CTRL+F2, and
> then basically escalate privileges to root by killing -SIGSEGV
> enlightenment and accessing the terminal which was under lockscreen before
> but which is now unlocked.

I was wondering the same thing, as I was also using the segfault e trick
to fix my password.

-- 

Simon Lees (Simotek)http://simotek.net

Emergency Update Team   keybase.io/simotek
SUSE Linux   Adelaide Australia, UTC+10:30
GPG Fingerprint: 5B87 DB9D 88DC F606 E489 CEC5 0922 C246 02F0 014B

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
enlightenment-users mailing list
enlightenment-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/enlightenment-users

Re: [e-users] Enlightenment DR 0.22.2 Release

[Daniel Kasak]

I have similar concerns. Recently, I've had issues with Enlightenment
crashing when my laptop comes out of the suspend state. I wouldn't normally
be concerned, other than the fact that this laptop has work-related stuff,
and absolutely has to present a lock screen when it's woken. I can imagine
it might be annoying to make E *default* to presenting a lock screen when
recovering from a crash, but an *option* to activate this behaviour would
be a good idea.

Dan

On Fri, Mar 23, 2018 at 2:39 AM, Pau Espin Pedrol 
wrote:

> 2018-03-21 8:24 GMT+01:00 Simon Lees :
>
> > Be aware that this release has issues with the lock screen not
> > unlocking, we are working on a fix and 0.22.3 will be out in the coming
> > days fixing this issue.
> >
>
> Until then, the only way to recover your session right now, as posted in
> archlinux issue tracking the upstream one, is to go to a console (CTRL+F2)
> and "kill -SIGSEGV enlightenment" , at which point the "white screen of
> death" will appear and after resuming from it, the screenlock will be gone.
>
> Which makes me think, is this a desired behaviour too? After killing
> enlightenment and resuming the session, shouldn't it return automatically
> to the screenlock if it was in that state? Looks like a security issue for
> me. Imagine I have a terminal emulator with "su root" inside enlightenment,
> and I also have a terminal opened in CTRL+F2 with my unprivileged user. If
> I leave my PC unattened, somebody could access my user through CTRL+F2, and
> then basically escalate privileges to root by killing -SIGSEGV
> enlightenment and accessing the terminal which was under lockscreen before
> but which is now unlocked.
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> ___
> enlightenment-users mailing list
> enlightenment-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/enlightenment-users
>
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
enlightenment-users mailing list
enlightenment-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/enlightenment-users

Re: [e-users] Enlightenment DR 0.22.2 Release

[Pau Espin Pedrol]

2018-03-21 8:24 GMT+01:00 Simon Lees :

> Be aware that this release has issues with the lock screen not
> unlocking, we are working on a fix and 0.22.3 will be out in the coming
> days fixing this issue.
>

Until then, the only way to recover your session right now, as posted in
archlinux issue tracking the upstream one, is to go to a console (CTRL+F2)
and "kill -SIGSEGV enlightenment" , at which point the "white screen of
death" will appear and after resuming from it, the screenlock will be gone.

Which makes me think, is this a desired behaviour too? After killing
enlightenment and resuming the session, shouldn't it return automatically
to the screenlock if it was in that state? Looks like a security issue for
me. Imagine I have a terminal emulator with "su root" inside enlightenment,
and I also have a terminal opened in CTRL+F2 with my unprivileged user. If
I leave my PC unattened, somebody could access my user through CTRL+F2, and
then basically escalate privileges to root by killing -SIGSEGV
enlightenment and accessing the terminal which was under lockscreen before
but which is now unlocked.
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
enlightenment-users mailing list
enlightenment-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/enlightenment-users

Re: [e-users] Enlightenment DR 0.22.2 Release

[Marc Burkhardt]

I added a task. Hopefull that was correct.

Best regards,
Marc
P.S: sent from mobile, might be short.

Am March 21, 2018 9:52:33 PM UTC schrieb Simon Lees :
>Hi
>
>On 21/03/18 18:16, Marc Burkhardt wrote:
>> Hey there,
>> 
>> besides this the smart window resize is broken. It doesn't use the
>available free vertical and horizontal space any more, but maximizes
>fullscreen instead.
>> 
>
>Can you open a report on phab.enlightenment.org,
>
>Thanks
>
>> 
>> Am March 21, 2018 7:24:48 AM UTC schrieb Simon Lees :
>>> Be aware that this release has issues with the lock screen not
>>> unlocking, we are working on a fix and 0.22.3 will be out in the
>coming
>>> days fixing this issue.
>>>
>>> Cheers
>>>
>>> On 15/03/18 15:11, Simon Lees wrote:
 CHANGES

>>>
>https://git.enlightenment.org/core/enlightenment.git/tree/NEWS?h=v0.22.2


 4d581ef85246f0cba003427bb9b3758e3de137babea1cdd2affd70a2cbe1632c

>>>
>http://download.enlightenment.org/rel/apps/enlightenment/enlightenment-0.22.2.tar.xz

 See the full announcement for more details:
 https://www.enlightenment.org/news/e0.22.2_release


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
enlightenment-users mailing list
enlightenment-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/enlightenment-users

Re: [e-users] Enlightenment DR 0.22.2 Release

[Simon Lees]

Hi

On 21/03/18 18:16, Marc Burkhardt wrote:
> Hey there,
> 
> besides this the smart window resize is broken. It doesn't use the available 
> free vertical and horizontal space any more, but maximizes fullscreen instead.
> 

Can you open a report on phab.enlightenment.org,

Thanks

> 
> Am March 21, 2018 7:24:48 AM UTC schrieb Simon Lees :
>> Be aware that this release has issues with the lock screen not
>> unlocking, we are working on a fix and 0.22.3 will be out in the coming
>> days fixing this issue.
>>
>> Cheers
>>
>> On 15/03/18 15:11, Simon Lees wrote:
>>> CHANGES
>>>
>> https://git.enlightenment.org/core/enlightenment.git/tree/NEWS?h=v0.22.2
>>>
>>>
>>> 4d581ef85246f0cba003427bb9b3758e3de137babea1cdd2affd70a2cbe1632c
>>>
>> http://download.enlightenment.org/rel/apps/enlightenment/enlightenment-0.22.2.tar.xz
>>>
>>> See the full announcement for more details:
>>> https://www.enlightenment.org/news/e0.22.2_release
>>>

-- 

Simon Lees (Simotek)http://simotek.net

Emergency Update Team   keybase.io/simotek
SUSE Linux   Adelaide Australia, UTC+10:30
GPG Fingerprint: 5B87 DB9D 88DC F606 E489 CEC5 0922 C246 02F0 014B

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
enlightenment-users mailing list
enlightenment-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/enlightenment-users

Re: [e-users] Enlightenment DR 0.22.2 Release

[Marc Burkhardt]

Hey there,

besides this the smart window resize is broken. It doesn't use the available 
free vertical and horizontal space any more, but maximizes fullscreen instead.

Best regards,
Marc
P.S: sent from mobile, might be short.

Am March 21, 2018 7:24:48 AM UTC schrieb Simon Lees :
>Be aware that this release has issues with the lock screen not
>unlocking, we are working on a fix and 0.22.3 will be out in the coming
>days fixing this issue.
>
>Cheers
>
>On 15/03/18 15:11, Simon Lees wrote:
>> CHANGES
>>
>https://git.enlightenment.org/core/enlightenment.git/tree/NEWS?h=v0.22.2
>> 
>> 
>> 4d581ef85246f0cba003427bb9b3758e3de137babea1cdd2affd70a2cbe1632c
>>
>http://download.enlightenment.org/rel/apps/enlightenment/enlightenment-0.22.2.tar.xz
>> 
>> See the full announcement for more details:
>> https://www.enlightenment.org/news/e0.22.2_release
>> 

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
enlightenment-users mailing list
enlightenment-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/enlightenment-users

Re: [e-users] Enlightenment DR 0.22.2 Release

[Simon Lees]

Be aware that this release has issues with the lock screen not
unlocking, we are working on a fix and 0.22.3 will be out in the coming
days fixing this issue.

Cheers

On 15/03/18 15:11, Simon Lees wrote:
> CHANGES
> https://git.enlightenment.org/core/enlightenment.git/tree/NEWS?h=v0.22.2
> 
> 
> 4d581ef85246f0cba003427bb9b3758e3de137babea1cdd2affd70a2cbe1632c
> http://download.enlightenment.org/rel/apps/enlightenment/enlightenment-0.22.2.tar.xz
> 
> See the full announcement for more details:
> https://www.enlightenment.org/news/e0.22.2_release
> 

-- 

Simon Lees (Simotek)http://simotek.net

Emergency Update Team   keybase.io/simotek
SUSE Linux   Adelaide Australia, UTC+10:30
GPG Fingerprint: 5B87 DB9D 88DC F606 E489 CEC5 0922 C246 02F0 014B

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
enlightenment-users mailing list
enlightenment-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/enlightenment-users