slim icon indicating copy to clipboard operation
slim copied to clipboard

Slimlock Bug/Vulnerability: isn't guaranteed to grab keyboard

Open cstrahan opened this issue 8 years ago • 0 comments

I found a reproducible problem with how slimlock grabs the keyboard:

  1. Click the gnome-applet icon, causing the config dropdown to appear
  2. Wait for the screensaver to start (in my case, via xss-lock listening to the X server)
  3. Attempt to type in the password, noting that the password text box isn't reacting.
  4. When you press the letter 'c', the gnome-applet "Configure hidden network" shortcut is triggered, bypassing slimlock and giving focus to the respective virtual desktop.

cstrahan avatar Jun 11 '16 19:06 cstrahan