From: PCMan <pcm...@gm...> - 2010-08-02 19:32:16
|
For locking the screen, is it acceptable to add options to lxsession to execute some commands prior to suspend/hibernation? So we can execute the locking command of either xscreensaver or gnome-screen-saver, or others according to the settings? Is this an acceptable option? On Mon, Aug 2, 2010 at 2:46 AM, Julien Lavergne <gi...@ub...> wrote: > Le dimanche 01 août 2010 à 19:37 +0400, Mikhail Maksimov a écrit : >> Thanks, 'xscreensaver-command -lock' works just fine for deliberately >> locking the screen. Is there an easy way to get the screen locked in >> suspend-resume sequence? > There is no integration of the lock screen option of the screensaver. I > reported the bug to keep it in mind : > https://bugs.launchpad.net/ubuntu/+source/lxsession/+bug/612332 > > Regards, > Julien Lavergne > > > _______________________________________________ > Mailing list: https://launchpad.net/~lubuntu-desktop > Post to : lub...@li... > Unsubscribe : https://launchpad.net/~lubuntu-desktop > More help : https://help.launchpad.net/ListHelp > |
From: Marty J. <mar...@co...> - 2010-08-02 19:39:23
|
Sounds like something should definitely be done. If you read the xscreensaver site, he claims that xscreensaver is the most secure, because it uses X directly and doesn't depend on a higher level toolkit which, though prettier, might have a deep bug that causes the screensaver to abort and unlock the screen. But I think it would be acceptable to have the command be a configuration option as long as you document the security tradeoffs. I believe SUSE was on the point of raising a CVE for this (and Andrea put in a change and then later reverted it) which if true would be something that would be a showstopper. On 08/02/2010 03:32 PM, PCMan wrote: > For locking the screen, is it acceptable to add options to lxsession > to execute some commands prior to suspend/hibernation? So we can > execute the locking command of either xscreensaver or > gnome-screen-saver, or others according to the settings? > > Is this an acceptable option? > > On Mon, Aug 2, 2010 at 2:46 AM, Julien Lavergne <gi...@ub...> wrote: >> Le dimanche 01 août 2010 à 19:37 +0400, Mikhail Maksimov a écrit : >>> Thanks, 'xscreensaver-command -lock' works just fine for deliberately >>> locking the screen. Is there an easy way to get the screen locked in >>> suspend-resume sequence? >> There is no integration of the lock screen option of the screensaver. I >> reported the bug to keep it in mind : >> https://bugs.launchpad.net/ubuntu/+source/lxsession/+bug/612332 >> >> Regards, >> Julien Lavergne >> >> >> _______________________________________________ >> Mailing list: https://launchpad.net/~lubuntu-desktop >> Post to : lub...@li... >> Unsubscribe : https://launchpad.net/~lubuntu-desktop >> More help : https://help.launchpad.net/ListHelp >> > > ------------------------------------------------------------------------------ > The Palm PDK Hot Apps Program offers developers who use the > Plug-In Development Kit to bring their C/C++ apps to Palm for a share > of $1 Million in cash or HP Products. Visit us here for more details: > http://p.sf.net/sfu/dev2dev-palm > _______________________________________________ > Lxde-list mailing list > Lxd...@li... > https://lists.sourceforge.net/lists/listinfo/lxde-list > |
From: Guido B. <gui...@be...> - 2010-08-04 12:16:53
|
* Marty Jack <mar...@co...> [2010-08-02 21:39]: > Sounds like something should definitely be done. > > If you read the xscreensaver site, he claims that xscreensaver is the most secure, because it uses X directly and doesn't depend on a higher level toolkit which, though prettier, might have a deep bug that causes the screensaver to abort and unlock the screen. But I think it would be acceptable to have the command be a configuration option as long as you document the security tradeoffs. > > I believe SUSE was on the point of raising a CVE for this (and Andrea put in a change and then later reverted it) which if true would be something that would be a showstopper. Yes, CVE-2010-2532. We are using a patch which checks whether gnome-screensaver or xscreensaver is running or xlockmore is available in order to lock the screen, see https://bugzillafiles.novell.org/attachment.cgi?id=376583 AFAIK Andrea had applied this to lxsession git, but then reverted it due to complaints. -- Guido Berhoerster |
From: PCMan <pcm...@gm...> - 2010-08-02 19:59:59
|
My previous plan for this is to have our own locking program. I read the source code of gnome-screensaver and found the part doing the locking. If we take it and have our own locking program, then we don't need to depend on any screensaver and things will be guaranteed to work correctly. However, this cannot be easily done in short period of time and it's actually a general practice to use screen saver for this purpose. Given there aren't too many existing screensaver implementations, it's possible to support them one by one. Since xdg-screensaver is not reliable sometimes, maybe the more reasonable option is to add a configurable option for locking command. Of course if we have a generic lock screen as fallback it will even be better. A more flexible way is to have pre-suspend and pre-hibernate scripts. So users can add arbitory commands in the scripts in, for example, /etc/xdg/lxsession/LXDE/pre-suspend.d/ prior to suspend and hibernate. Is this needed or a simple locking command option is enough? On Tue, Aug 3, 2010 at 3:39 AM, Marty Jack <mar...@co...> wrote: > Sounds like something should definitely be done. > > If you read the xscreensaver site, he claims that xscreensaver is the most secure, because it uses X directly and doesn't depend on a higher level toolkit which, though prettier, might have a deep bug that causes the screensaver to abort and unlock the screen. But I think it would be acceptable to have the command be a configuration option as long as you document the security tradeoffs. > > I believe SUSE was on the point of raising a CVE for this (and Andrea put in a change and then later reverted it) which if true would be something that would be a showstopper. > > On 08/02/2010 03:32 PM, PCMan wrote: >> For locking the screen, is it acceptable to add options to lxsession >> to execute some commands prior to suspend/hibernation? So we can >> execute the locking command of either xscreensaver or >> gnome-screen-saver, or others according to the settings? >> >> Is this an acceptable option? >> >> On Mon, Aug 2, 2010 at 2:46 AM, Julien Lavergne <gi...@ub...> wrote: >>> Le dimanche 01 août 2010 à 19:37 +0400, Mikhail Maksimov a écrit : >>>> Thanks, 'xscreensaver-command -lock' works just fine for deliberately >>>> locking the screen. Is there an easy way to get the screen locked in >>>> suspend-resume sequence? >>> There is no integration of the lock screen option of the screensaver. I >>> reported the bug to keep it in mind : >>> https://bugs.launchpad.net/ubuntu/+source/lxsession/+bug/612332 >>> >>> Regards, >>> Julien Lavergne >>> >>> >>> _______________________________________________ >>> Mailing list: https://launchpad.net/~lubuntu-desktop >>> Post to : lub...@li... >>> Unsubscribe : https://launchpad.net/~lubuntu-desktop >>> More help : https://help.launchpad.net/ListHelp >>> >> >> ------------------------------------------------------------------------------ >> The Palm PDK Hot Apps Program offers developers who use the >> Plug-In Development Kit to bring their C/C++ apps to Palm for a share >> of $1 Million in cash or HP Products. Visit us here for more details: >> http://p.sf.net/sfu/dev2dev-palm >> _______________________________________________ >> Lxde-list mailing list >> Lxd...@li... >> https://lists.sourceforge.net/lists/listinfo/lxde-list >> > > ------------------------------------------------------------------------------ > The Palm PDK Hot Apps Program offers developers who use the > Plug-In Development Kit to bring their C/C++ apps to Palm for a share > of $1 Million in cash or HP Products. Visit us here for more details: > http://p.sf.net/sfu/dev2dev-palm > _______________________________________________ > Lxde-list mailing list > Lxd...@li... > https://lists.sourceforge.net/lists/listinfo/lxde-list > |
From: Cilyan O. <ga...@gm...> - 2010-08-02 20:15:34
|
Have a look at slock also. 2010/8/2 PCMan <pcm...@gm...>: > My previous plan for this is to have our own locking program. I read > the source code of gnome-screensaver and found the part doing the > locking. If we take it and have our own locking program, then we don't > need to depend on any screensaver and things will be guaranteed to > work correctly. However, this cannot be easily done in short period of > time and it's actually a general practice to use screen saver for this > purpose. Given there aren't too many existing screensaver > implementations, it's possible to support them one by one. Since > xdg-screensaver is not reliable sometimes, maybe the more reasonable > option is to add a configurable option for locking command. Of course > if we have a generic lock screen as fallback it will even be better. A > more flexible way is to have pre-suspend and pre-hibernate scripts. So > users can add arbitory commands in the scripts in, for example, > /etc/xdg/lxsession/LXDE/pre-suspend.d/ prior to suspend and hibernate. > Is this needed or a simple locking command option is enough? > > On Tue, Aug 3, 2010 at 3:39 AM, Marty Jack <mar...@co...> wrote: >> Sounds like something should definitely be done. >> >> If you read the xscreensaver site, he claims that xscreensaver is the most secure, because it uses X directly and doesn't depend on a higher level toolkit which, though prettier, might have a deep bug that causes the screensaver to abort and unlock the screen. But I think it would be acceptable to have the command be a configuration option as long as you document the security tradeoffs. >> >> I believe SUSE was on the point of raising a CVE for this (and Andrea put in a change and then later reverted it) which if true would be something that would be a showstopper. >> >> On 08/02/2010 03:32 PM, PCMan wrote: >>> For locking the screen, is it acceptable to add options to lxsession >>> to execute some commands prior to suspend/hibernation? So we can >>> execute the locking command of either xscreensaver or >>> gnome-screen-saver, or others according to the settings? >>> >>> Is this an acceptable option? >>> >>> On Mon, Aug 2, 2010 at 2:46 AM, Julien Lavergne <gi...@ub...> wrote: >>>> Le dimanche 01 août 2010 à 19:37 +0400, Mikhail Maksimov a écrit : >>>>> Thanks, 'xscreensaver-command -lock' works just fine for deliberately >>>>> locking the screen. Is there an easy way to get the screen locked in >>>>> suspend-resume sequence? >>>> There is no integration of the lock screen option of the screensaver. I >>>> reported the bug to keep it in mind : >>>> https://bugs.launchpad.net/ubuntu/+source/lxsession/+bug/612332 >>>> >>>> Regards, >>>> Julien Lavergne >>>> >>>> >>>> _______________________________________________ >>>> Mailing list: https://launchpad.net/~lubuntu-desktop >>>> Post to : lub...@li... >>>> Unsubscribe : https://launchpad.net/~lubuntu-desktop >>>> More help : https://help.launchpad.net/ListHelp >>>> >>> >>> ------------------------------------------------------------------------------ >>> The Palm PDK Hot Apps Program offers developers who use the >>> Plug-In Development Kit to bring their C/C++ apps to Palm for a share >>> of $1 Million in cash or HP Products. Visit us here for more details: >>> http://p.sf.net/sfu/dev2dev-palm >>> _______________________________________________ >>> Lxde-list mailing list >>> Lxd...@li... >>> https://lists.sourceforge.net/lists/listinfo/lxde-list >>> >> >> ------------------------------------------------------------------------------ >> The Palm PDK Hot Apps Program offers developers who use the >> Plug-In Development Kit to bring their C/C++ apps to Palm for a share >> of $1 Million in cash or HP Products. Visit us here for more details: >> http://p.sf.net/sfu/dev2dev-palm >> _______________________________________________ >> Lxde-list mailing list >> Lxd...@li... >> https://lists.sourceforge.net/lists/listinfo/lxde-list >> > > ------------------------------------------------------------------------------ > The Palm PDK Hot Apps Program offers developers who use the > Plug-In Development Kit to bring their C/C++ apps to Palm for a share > of $1 Million in cash or HP Products. Visit us here for more details: > http://p.sf.net/sfu/dev2dev-palm > _______________________________________________ > Lxde-list mailing list > Lxd...@li... > https://lists.sourceforge.net/lists/listinfo/lxde-list > |
From: Julien L. <gi...@ub...> - 2010-08-02 20:22:14
|
Le mardi 03 août 2010 à 03:32 +0800, PCMan a écrit : > For locking the screen, is it acceptable to add options to lxsession > to execute some commands prior to suspend/hibernation? So we can > execute the locking command of either xscreensaver or > gnome-screen-saver, or others according to the settings? > > Is this an acceptable option? Yes. Also, maybe an auto-mode, detecting which screensaver is running and use it, would be nice. Regards, Julien Lavergne |
From: Guido B. <gui...@be...> - 2010-08-04 12:53:51
|
* Julien Lavergne <gi...@ub...> [2010-08-02 22:22]: > Le mardi 03 août 2010 à 03:32 +0800, PCMan a écrit : > > For locking the screen, is it acceptable to add options to lxsession > > to execute some commands prior to suspend/hibernation? So we can > > execute the locking command of either xscreensaver or > > gnome-screen-saver, or others according to the settings? > > > > Is this an acceptable option? > > Yes. Also, maybe an auto-mode, detecting which screensaver is running > and use it, would be nice. The patch at https://bugzillafiles.novell.org/attachment.cgi?id=376583 does exactly that. -- Guido Berhoerster |
From: Christoph W. <chr...@go...> - 2010-08-02 21:02:58
|
Am Montag, den 02.08.2010, 22:15 +0200 schrieb Cilyan Olowen: > Have a look at slock also. The patch in the Novell bugtracker already includes slock, but unfortunately only as last option after gnome-screensaver and xscreensaver. Regards, Christoph |
From: Guido B. <gui...@be...> - 2010-08-04 12:52:51
|
* Christoph Wickert <chr...@go...> [2010-08-02 23:03]: > Am Montag, den 02.08.2010, 22:15 +0200 schrieb Cilyan Olowen: > > Have a look at slock also. > > The patch in the Novell bugtracker already includes slock, but > unfortunately only as last option after gnome-screensaver and > xscreensaver. That is not entirely correct, it uses xlockmore if neither xscreensaver nor gnome-screensaver are running. If you run a screensaver in your session it is IMO reasonable to assume that you want it to be used. -- Guido Berhoerster |
From: Bob T. <bob...@gm...> - 2010-08-02 20:32:03
|
Would it be possible to go one more step and have the screensaver and lock able to kick in when it's sitting at the login screen? Here we often log out and walk away, and the next person who wants to use it logs in. If nobody does, I'd like it to go into screen save -> lock -> monitor standby modes, the way Ubuntu (gdm I presume) does. Is that something enough people would care about to make it worth it? On Mon, Aug 2, 2010 at 4:22 PM, Julien Lavergne <gi...@ub...> wrote: > Le mardi 03 août 2010 à 03:32 +0800, PCMan a écrit : >> For locking the screen, is it acceptable to add options to lxsession >> to execute some commands prior to suspend/hibernation? So we can >> execute the locking command of either xscreensaver or >> gnome-screen-saver, or others according to the settings? >> >> Is this an acceptable option? > > Yes. Also, maybe an auto-mode, detecting which screensaver is running > and use it, would be nice. > > Regards, > Julien Lavergne > > > _______________________________________________ > Mailing list: https://launchpad.net/~lubuntu-desktop > Post to : lub...@li... > Unsubscribe : https://launchpad.net/~lubuntu-desktop > More help : https://help.launchpad.net/ListHelp > |
From: Marty J. <mar...@co...> - 2010-08-04 12:20:29
|
By definition "lock screen" is something that is done in the context of a user, whose password is then required to unlock. If you were to lock the screen with no one logged in, that makes no sense. Your other points are good though; but I would think that nothing much needs to be done beyond making sure the server is set up as wanted, since the server manages the timer and will fire off whatever screensaver/DPMS mode is configured by "xset dpms" or "xset s" or their Xlib-level equivalents, whether it is the login screen or a logged-in user that is being displayed. On 08/02/10 16:31, Bob Trevithick wrote: > Would it be possible to go one more step and have the screensaver and > lock able to kick in when it's sitting at the login screen? Here we > often log out and walk away, and the next person who wants to use it > logs in. If nobody does, I'd like it to go into screen save -> lock > -> monitor standby modes, the way Ubuntu (gdm I presume) does. Is > that something enough people would care about to make it worth it? > > On Mon, Aug 2, 2010 at 4:22 PM, Julien Lavergne <gi...@ub...> wrote: >> Le mardi 03 août 2010 à 03:32 +0800, PCMan a écrit : >>> For locking the screen, is it acceptable to add options to lxsession >>> to execute some commands prior to suspend/hibernation? So we can >>> execute the locking command of either xscreensaver or >>> gnome-screen-saver, or others according to the settings? >>> >>> Is this an acceptable option? >> >> Yes. Also, maybe an auto-mode, detecting which screensaver is running >> and use it, would be nice. >> >> Regards, >> Julien Lavergne >> >> >> _______________________________________________ >> Mailing list: https://launchpad.net/~lubuntu-desktop >> Post to : lub...@li... >> Unsubscribe : https://launchpad.net/~lubuntu-desktop >> More help : https://help.launchpad.net/ListHelp >> > > ------------------------------------------------------------------------------ > The Palm PDK Hot Apps Program offers developers who use the > Plug-In Development Kit to bring their C/C++ apps to Palm for a share > of $1 Million in cash or HP Products. Visit us here for more details: > http://p.sf.net/sfu/dev2dev-palm > _______________________________________________ > Lxde-list mailing list > Lxd...@li... > https://lists.sourceforge.net/lists/listinfo/lxde-list |