From owner-freebsd-questions Fri Sep 7 10:18:23 2001 Delivered-To: freebsd-questions@freebsd.org Received: from po3.wam.umd.edu (po3.wam.umd.edu [128.8.10.165]) by hub.freebsd.org (Postfix) with ESMTP id AAFED37B407 for ; Fri, 7 Sep 2001 10:18:18 -0700 (PDT) Received: from sun09pg2.wam.umd.edu (IDENT:root@sun09pg2.wam.umd.edu [128.8.73.19]) by po3.wam.umd.edu (8.9.3/8.9.3) with ESMTP id NAA14357; Fri, 7 Sep 2001 13:18:13 -0400 (EDT) Received: from sun09pg2.wam.umd.edu (IDENT:sendmail@localhost [127.0.0.1]) by sun09pg2.wam.umd.edu (8.9.3/8.9.3) with SMTP id NAA05376; Fri, 7 Sep 2001 13:18:12 -0400 (EDT) Received: from localhost (culverk@localhost) by sun09pg2.wam.umd.edu (8.9.3/8.9.3) with ESMTP id NAA05372; Fri, 7 Sep 2001 13:18:12 -0400 (EDT) X-Authentication-Warning: sun09pg2.wam.umd.edu: culverk owned process doing -bs Date: Fri, 7 Sep 2001 13:18:12 -0400 (EDT) From: Kenneth Wayne Culver To: Joe Clarke Cc: John Indra , freebsd-questions@FreeBSD.ORG Subject: Re: KDE 2.2 screen locker doesn't work In-Reply-To: <20010907010010.X10093-100000@shumai.marcuscom.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG > ************************** I M P O R T A N T **************************** > > This package (kdebase2) installs a program called kcheckpass which is > used by kdm or screensavers to check the user's password. This activity > requires it to be setuid root. However, for security reasons, FreeBSD > leaves the setuid bit on this binary off by default, for several reasons. > First, some people may not use screensavers or kdm at all. Second, > others may choose to use a different screensaver or display manager > utility. And finally, there may be holes in kcheckpass which can be > exploited to gain root privileges. FreeBSD chooses not to take that risk > with the default package. If you decide that you need it setuid root, > you can make it so: > > chmod u+s ${PREFIX}/bin/kcheckpass > > ..where ${PREFIX} is the prefix where this package was installed. It is > typically /usr/local but may also be /usr/X11R6 or /usr. > > ************************** I M P O R T A N T **************************** > > Joe > Or you can just add the --with-shadow line to the Makefile under CONFIGURE_ARGS and it'll work fine whether it's suid root or not. Ken > > > On Fri, 7 Sep 2001, John Indra wrote: > > > Hi... > > > > I am running a -CURRENT system and KDE 2.2 installed from ports. I have > > kdebase-2.2_2. > > $ ls -l /usr/local/bin/kcheckpass *.kss > > -r-xr-xr-x 1 root wheel 41208 Sep 6 16:06 /usr/local/bin/kbanner.kss > > -r-xr-xr-x 1 root wheel 21972 Sep 6 16:06 /usr/local/bin/kblankscrn.kss > > -r-xr-xr-x 1 root wheel 31604 Sep 6 16:07 /usr/local/bin/kblob.kss > > -r-xr-xr-x 1 root wheel 42644 Sep 6 16:07 /usr/local/bin/kbouboule.kss > > -rwsr-xr-x 1 root wheel 9840 Sep 6 15:59 /usr/local/bin/kcheckpass > > -r-xr-xr-x 1 root wheel 31224 Sep 6 16:07 /usr/local/bin/klines.kss > > -r-xr-xr-x 1 root wheel 31516 Sep 6 16:07 /usr/local/bin/klorenz.kss > > -r-xr-xr-x 1 root wheel 49644 Sep 6 16:07 /usr/local/bin/kmatrix.kss > > -r-xr-xr-x 1 root wheel 46976 Sep 6 16:07 /usr/local/bin/kpartsaver.kss > > -r-xr-xr-x 1 root wheel 33644 Sep 6 16:06 /usr/local/bin/kpolygon.kss > > -r-xr-xr-x 1 root wheel 37556 Sep 6 16:07 /usr/local/bin/kpyro.kss > > -r-xr-xr-x 1 root wheel 12788 Sep 6 16:07 /usr/local/bin/krandom.kss > > -r-xr-xr-x 1 root wheel 39572 Sep 6 16:07 /usr/local/bin/krock.kss > > -r-xr-xr-x 1 root wheel 47976 Sep 6 16:07 /usr/local/bin/kscience.kss > > -r-xr-xr-x 1 root wheel 45804 Sep 6 16:07 /usr/local/bin/kslidescreen.kss > > -r-xr-xr-x 1 root wheel 51456 Sep 6 16:07 /usr/local/bin/kslideshow.kss > > -r-xr-xr-x 1 root wheel 35444 Sep 6 16:07 /usr/local/bin/kswarm.kss > > -r-xr-xr-x 1 root wheel 51868 Sep 6 16:07 /usr/local/bin/kvm.kss > > > > But whenever I lock the screen (using the locker icon on the kicker), I > > can't get back to my session. > > > > How to overcome this problem? > > tq... > > > > /john > > Live Free OR Die > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-questions" in the body of the message > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message