From owner-freebsd-ports@FreeBSD.ORG Tue Jun 13 12:44:24 2006 Return-Path: X-Original-To: freebsd-ports@freebsd.org Delivered-To: freebsd-ports@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7B88816A478 for ; Tue, 13 Jun 2006 12:44:24 +0000 (UTC) (envelope-from tarc@tarc.po.cs.msu.su) Received: from tarc.po.cs.msu.su (tarc.po.cs.msu.su [158.250.16.33]) by mx1.FreeBSD.org (Postfix) with ESMTP id A28EB43D6E for ; Tue, 13 Jun 2006 12:44:19 +0000 (GMT) (envelope-from tarc@tarc.po.cs.msu.su) Received: from tarc.po.cs.msu.su (localhost [127.0.0.1]) by tarc.po.cs.msu.su (8.13.4/8.13.4) with ESMTP id k5DCkkCP057840 for ; Tue, 13 Jun 2006 16:46:46 +0400 (MSD) (envelope-from tarc@tarc.po.cs.msu.su) Received: (from tarc@localhost) by tarc.po.cs.msu.su (8.13.4/8.13.4/Submit) id k5DCkkpm057839 for freebsd-ports@freebsd.org; Tue, 13 Jun 2006 16:46:46 +0400 (MSD) (envelope-from tarc) Date: Tue, 13 Jun 2006 16:46:45 +0400 From: Tarc To: FreeBSD Ports Message-ID: <20060613124645.GA57805@tarc.po.cs.msu.su> References: <20060613124520.GH22799@tarc.po.cs.msu.su> MIME-Version: 1.0 Content-Type: text/plain; charset=koi8-r Content-Disposition: inline In-Reply-To: <20060613124520.GH22799@tarc.po.cs.msu.su> User-Agent: mutt-ng/devel-r581 (FreeBSD) Subject: Re: xlockmore - serious security issue X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Jun 2006 12:44:24 -0000 On Tue, Jun 13, 2006 at 04:45:20PM +0400, Tarc wrote: > On Tue, Jun 13, 2006 at 03:18:16PM +0400, Andrew Pantyukhin wrote: > > For months I've been in doubt, holding my own insanity > > responsible for compromising my own workstation for > > several times on end. > > > I don't have _any_ problems, my config args follow. > ** Without BAD_PAM I have troubles with lock out my X Display. > > /usr/ports/x11/xlockmore>make showconfig > ===> The following configuration options are set for xlockmore-5.22: > MESAGL=on "Enable Mesa 3D (for GL modes)" > MB=on "Enable Xmb function series" > SYSLOG=on "Enable syslog logging" > DISABLE_ALLOW_ROOT=off "Allows users to turn off allowroot" > NICE_ONLY=off "Enable only low cpu modes" > BLANK_ONLY=off "Enable blank mode only (boring)" > PAM=on "Enable PAM authentication support" > BAD_PAM=on "Xlock will ask PAM with root rights" > -- > Best regards, > Arseny Nasokin -- Best regards, Arseny Nasokin