Package: xtrlock
Version: 2.8
Severity: wishlist
Hi,
could you please add some explicit warning that this tool is not a
secure way to lock the screen if Wayland is in use?
Currently if a user installs Debian 10 with the default gnome3 desktop
and uses xtrlock the cursor is changed to a padlock icon and the user
might think that everything is working smoothly. However, you can
easily bypass the lock by hitting e.g. the GUI key to access the gnome
shell to start a gnome-terminal where you can then kill xtrlock.
Ideally we should probably try to detect Wayland automatically but if
that is not possible then at least the man page should have a clear
warning about this?
Btw, is there something similar that would work with Wayland?
-Timo
-- System Information:
Debian Release: 10.3
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-debug'), (500,
'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.19.0-8-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages xtrlock depends on:
ii libc6 2.28-10
ii libx11-6 2:1.6.7-1
xtrlock recommends no packages.
xtrlock suggests no packages.
-- no debconf information