From owner-freebsd-ports@FreeBSD.ORG Tue Jun 13 15:07:55 2006 Return-Path: X-Original-To: ports@freebsd.org Delivered-To: freebsd-ports@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1425F16A418; Tue, 13 Jun 2006 15:07:55 +0000 (UTC) (envelope-from amistry@am-productions.biz) Received: from mail.united-ware.com (am-productions.biz [69.61.164.22]) by mx1.FreeBSD.org (Postfix) with ESMTP id B863C43D45; Tue, 13 Jun 2006 15:07:51 +0000 (GMT) (envelope-from amistry@am-productions.biz) Received: from [192.168.1.100] (am-productions.biz [69.61.164.22]) (authenticated bits=0) by mail.united-ware.com (8.13.4/8.13.6) with ESMTP id k5DFAqkH061289 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 13 Jun 2006 11:11:01 -0400 (EDT) (envelope-from amistry@am-productions.biz) From: Anish Mistry Organization: AM Productions To: "Andrew Pantyukhin" Date: Tue, 13 Jun 2006 11:07:26 -0400 User-Agent: KMail/1.9.1 References: <200606131037.58401.amistry@am-productions.biz> In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart3054853.z3bsZYTU4I"; protocol="application/pgp-signature"; micalg=pgp-sha1 Content-Transfer-Encoding: 7bit Message-Id: <200606131107.45104.amistry@am-productions.biz> X-Spam-Status: No, score=-5.5 required=5.0 tests=ALL_TRUSTED,BAYES_50, MYFREEBSD3 autolearn=failed version=3.1.0 X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on mail.united-ware.com X-Virus-Scanned: ClamAV 0.88.2/1536/Mon Jun 12 17:07:37 2006 on mail.united-ware.com X-Virus-Status: Clean Cc: FreeBSD Ports , Doug Barton , Tobias Roth , UMENO Takashi Subject: Re: xlockmore - serious security issue X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Jun 2006 15:07:55 -0000 --nextPart3054853.z3bsZYTU4I Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline On Tuesday 13 June 2006 10:51, Andrew Pantyukhin wrote: > On 6/13/06, Anish Mistry wrote: > > On Tuesday 13 June 2006 07:54, Andrew Pantyukhin wrote: > > > On 6/13/06, Anton Berezin wrote: > > > > On Tue, Jun 13, 2006 at 03:18:16PM +0400, Andrew Pantyukhin=20 wrote: > > > > > For months I've been in doubt, holding my own insanity > > > > > responsible for compromising my own workstation for > > > > > several times on end. > > > > > > > > > > The problem is that xlockmore exits all by itself when > > > > > left alone for a couple of days. It works all right > > > > > overnight, but when left for the weekend, it almost > > > > > certainly fails. I just come to work and see that my > > > > > workstation is unlocked, what a surprise. > > > > > > > > > > At first I was sure that xlockmore could not just fail like > > > > > that, that it was me who forgot to launch it before > > > > > leaving. But for the last few times (over a month, > > > > > considering that I can only experiment at weekends), I made > > > > > a strong mental note about me launching xlock (I do it from > > > > > the fluxbox context menu, btw). > > > > > > > > > > Has anyone experienced this? My xlockmore is compiled > > > > > without any knobs tweaked. I use 5.22 and I'm not sure > > > > > if this problem was there in 5.21 or earlier versions. What > > > > > I am sure of is that I've used xlockmore for over a year > > > > > and never had this problem until a few months back. > > > > > > > > Any coredumps? > > > > > > Nope. None at all. > > > > > > > What -modes do you use? Other command line parameters? > > > > > > I just run "xlock". No args. > > > > > > > Sounds like a random -mode failure to me. > > > > > > Now that you mention it, it does. I'll try to stick to swarm. I > > > kinda like random modes, though. > > > > I just stick with a blank screen and works fine for several weeks > > at a time. I found some of the GL screensavers to cause > > problems. > > Ask me - we should mark this port forbidden and/or make > and entry in vuxml until we resolve this issue. Let's make > blank screen the default behavior or something. To leave > this as is is unacceptable. I think making the blank screen default or disabling the GL modes and=20 marking it forbidden if you toggle the switch to enable the GL modes,=20 should be sufficient. Ideally someone who cares about the GL modes=20 should probably look into fixing the problem. =2D-=20 Anish Mistry amistry@am-productions.biz AM Productions http://am-productions.biz/ --nextPart3054853.z3bsZYTU4I Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (FreeBSD) iD8DBQBEjtTBxqA5ziudZT0RArtlAJ43aSxOT3To7Ro9Ch2A+IA91wWjJgCfREAu qZ5795fxTMBRnmQ8VLqB0fk= =YZjN -----END PGP SIGNATURE----- --nextPart3054853.z3bsZYTU4I--