Re: Re: Re: Re: Security Audit Request for Screenlocker Branch

2011-10-13 Thread Martin Gräßlin
On Wednesday 12 October 2011 19:38:11 Oswald Buddenhagen wrote: On Wed, Oct 12, 2011 at 04:47:54PM +0200, Dario Freddi wrote: 2011/10/12 Martin Gräßlin mgraess...@kde.org: ok I have been thinking about it and have a new proposal: * writing a kded module to only handle the screen locking

Re: Re: Security Audit Request for Screenlocker Branch

2011-10-12 Thread Oswald Buddenhagen
On Tue, Oct 11, 2011 at 06:30:40PM +0200, Martin Gräßlin wrote: On Tuesday 11 October 2011 17:34:10 Oswald Buddenhagen wrote: on a more serious note, [h]ow do you handle the lock grace time? this is actually not affected by the changes. Dim Display and turning off the screen are decoupled

Re: Re: Re: Security Audit Request for Screenlocker Branch

2011-10-12 Thread Martin Gräßlin
On Wednesday 12 October 2011 09:10:40 Oswald Buddenhagen wrote: Of course KWin is a more complex application than others, but given what we need in a screen locker the difference becomes marginal IMHO. yes. one should consider decoupling the greeter from the core engine. I myself have

Re: Re: Re: Security Audit Request for Screenlocker Branch

2011-10-12 Thread Dario Freddi
2011/10/12 Martin Gräßlin mgraess...@kde.org: On Wednesday 12 October 2011 09:10:40 Oswald Buddenhagen wrote: Of course KWin is a more complex application than others, but given what we need in a screen locker the difference becomes marginal IMHO. yes. one should consider decoupling the

Re: Re: Re: Security Audit Request for Screenlocker Branch

2011-10-12 Thread Oswald Buddenhagen
On Wed, Oct 12, 2011 at 04:47:54PM +0200, Dario Freddi wrote: 2011/10/12 Martin Gräßlin mgraess...@kde.org: ok I have been thinking about it and have a new proposal: * writing a kded module to only handle the screen locking (grab keyboard and mouse) TBH, if you really care about not

Re: Re: Security Audit Request for Screenlocker Branch

2011-10-11 Thread Martin Gräßlin
On Tuesday 11 October 2011 15:33:39 Torgny Nyblom wrote: On Tuesday 11 October 2011 14.55.29 Martin Gräßlin wrote: On Monday 10 October 2011 20:02:07 Parker Coates wrote: On Sun, Oct 9, 2011 at 14:02, Martin Gräßlin wrote: I want to request a security audit for the changes to ensure that

Re: Re: Security Audit Request for Screenlocker Branch

2011-10-11 Thread Martin Gräßlin
On Tuesday 11 October 2011 16:06:11 Andras Mantia wrote: From here: If KWin crashes without restarting privacy is leaked but the system is hardly useable due to missing window manager. This situation can savely be ignored as a corner case as KWin normaly restart. This is not true, the

Re: Re: Security Audit Request for Screenlocker Branch

2011-10-11 Thread Martin Gräßlin
On Tuesday 11 October 2011 16:33:39 you wrote: Once the screen locker crashes, security must be assumed broken (if only by visual access). Therefore the locker must not crash full ack, we have to be at 0 crashes in KWin (which has to be our goal for Wayland anyway ;-) and if it does,

Re: Re: Security Audit Request for Screenlocker Branch

2011-10-11 Thread Martin Gräßlin
On Tuesday 11 October 2011 17:47:13 you wrote: Am Tue, 11 Oct 2011 17:00:46 +0200 schrieb Martin Gräßlin mgraess...@kde.org: that is a good suggestion. I will think about how I can add that. Though if someone breaks by crashing kwin he is also able to remove any log. So this could be just

Re: Re: Security Audit Request for Screenlocker Branch

2011-10-11 Thread Martin Gräßlin
On Tuesday 11 October 2011 17:34:10 Oswald Buddenhagen wrote: On Tue, Oct 11, 2011 at 03:55:15PM +0200, Thomas Lübking wrote: Am Tue, 11 Oct 2011 15:33:39 +0200 schrieb Torgny Nyblom nyb...@kde.org: Does this mean that I will be focred to use a screensaver with password unlock? If so why

Re: Re: Security Audit Request for Screenlocker Branch

2011-10-11 Thread Martin Gräßlin
On Tuesday 11 October 2011 21:06:13 Alexander Neundorf wrote: On Tuesday 11 October 2011, Martin Gräßlin wrote: On Tuesday 11 October 2011 16:06:11 Andras Mantia wrote: From here: If KWin crashes without restarting privacy is leaked but the system is hardly useable due to missing