-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Package: mate-screensaver Version: 1.16.1 Severity: normal Tags: security
When I run the proprietary software "VMware Workstation", and the HID devices are captured by a virtual machine console, the screensaver and screen locking mechanism are not triggered. As soon as I "release" the keyboard and mouse the screensaver is triggered instantly. This could pose a securty risk on workstations where virtual machines are administered. I suppose that the same problem will affect other VMware products such as VMware Remote Console and VMware Player because they essentially use the same console mechanism. The machine where this behavior was observed runs on the following software versions: - - Debian GNU/Linux v. 9.4 (according to /etc/debian_version) - - Linux Kernel v. 4.9.0-6-amd64 #1 SMP Debian 4.9.88-1+deb9u1 (2018-05-07) x86_64 GNU/Linux - - libc v. 2.24-11+deb9u3 - - mate-screensaver v. 1.16.1 - - VMware Workstation v. 14.1.2 build-8497320 Mit freundlichen Grüßen / best regards i.A. Kevin Kairat Kommunales Gebietsrechenzentrum Koblenz (KGRZ) - - Eigenbetrieb der Stadt Koblenz - Verwaltungshochhaus Schängel-Center Rathauspassage 2 56068 Koblenz Tel. +49 (0) 261 / 129-1255 Fax +49 (0) 261 / 129-1250 Mail [email protected] PGP https://pgp.mit.edu/pks/lookup?op=get&search=0x2B8F9065B687AB48 Internet: www.koblenz.de - ------------------------ Sitz des Eigenbetriebes: Koblenz Registergericht: Amtsgericht Koblenz, HRA 4389 USt-ID der Stadtverwaltung Koblenz: DE148721830 -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEj3nFbldoWRLpFYKQK4+QZbaHq0gFAlvRjV4ACgkQK4+QZbaH q0gmdw/+PY1usgLM+v/K7TGmlSeYVHNzwvcB2hqTlCi8P2K7npGH05fEoyIxTKrJ 0ccJ3YCmLAOJ++PgBxz8Fc6c2eGaxVyOKljnSinKIMVfuYj0qcVkgfJ3n4+1l+tF csvr0HsHxkDfqood2IV4C01BGyxMIM+aMCs9uL7dInGlAohoOHi5dGSzq9IsGam7 CSdzwkidk4Y2UNmsX7x04ton23qhmuhNHN1mJVG1i4OOM2tkFooc9L3nyw7Xq6n4 lbxc46vDlW1tin5sZzlAnjt3I9GfZdaCZPxHUQEa6D8amvNPF1Za96RZnOCp83LA i/mSRNbnM5D80DatzENhDMN/Kdbf/euHHxNbOOslPGQUgE7IN21DNjVVPMzOmNq4 igVTRth4SlXRIb8IX4e5ezLj0dG8Y9gAv/MVcfg8VO/ztU4jk0gE400nx6ut1Ix2 DaibQS1DT/ocBxs0NKOIOlp3qs4jU86CxpuEkLlbFk6hhWxpnIjx8EsjJyLvF13q 8HYuswOqqqrhP9lCCQH40q0w40cBTLwBRf7A7gmdG8DZRac2/pjqbiENd9TN/0Y0 SaS4YGj8LKm9m9rkoEMb5JQOuJj5mE+at+p58E/fVx5mP/6zdYP1mphhPes0vEQ9 UEo0szqbIQum0E3xsk7Qwd3u9ajorT+KVEYGNGejC+7nYAkMkpc= =syZ/ -----END PGP SIGNATURE-----
