Linked by Thom Holwerda on Mon 12th Dec 2005 15:38 UTC
Thread beginning with comment 71673
To view parent comment, click here.
To read all comments associated with this story, please click here.
To view parent comment, click here.
To read all comments associated with this story, please click here.
> Still worth considering. Interesting discussion
> either way.
What it really needs is a way to restart the X login manager that does not involve zapping the entire X server. That would allow the kind of security you want (you can ensure you really are logging into kdm or gdm and not someone else's trojan they left running), while at the same time protecting remote X application users from having someone pull the X server out from under them like Ctrl-Alt-Backspace would do.






Member since:
> So you say Ctrl+C is trappable, what about
> Ctrl+Alt+Backspace, which logs the user out of
> their current session? If one were really paranoid
> they could do that before every Linux login.
It can't be trapped because it is not an OS signal like SIGINT (Ctrl-C) is. It can be disabled in the X config file with the "DontZap" option. That does require root access of course, but many public terminals (such as those in University computer labs) do have the DontZap option in the X config file because they don't want normal users to be able to kill the X server (which would be rather nasty if remote users were using X applications on that system.)