K.S. Bhaskar on 9 Nov 2008 15:38:18 -0800


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] How to require password on wakeup from Suspend to RAM - Kubuntu 8.10 (Intrepid)


Here's the best way I have come up with to plug the security hole.

1. Make sure xscreensaver is started and idling in the background.

2. Make sure sudo won't prompt you for a password by doing something
like sudo su - and then exiting.

3. Execute the command line: sync ; xscreensaver-command -lock ; sudo
pm-suspend (yes, I know, the sync is not needed; it's like the
rabbit's foot one might carry into a casino if one were a gambling
man, which I am not - I guess I just know too much about software to
trust computers!).

Any other suggestions to make it easier?

-- Bhaskar

On Fri, Nov 7, 2008 at 10:18 PM, K.S. Bhaskar <bhaskar@bhaskars.com> wrote:
> KDE 4.1 on Kubuntu 8.10 seems to have a security hole.  If I suspend
> to RAM, either with the GUI and mouse, or with sudo pm-suspend, when
> it wakes up, it does not require a password.  KDE 3.5.9 on Kubuntu
> 8.04 when suspended to RAM and woken up would wake up with a
> screensaver (even if it wasn't running a screen saver when made to
> sleep), and my screensaver is password protected.  This seems like a
> major security hole.
>
> Does anyone know of a way to put a laptop/PC to sleep with Kubuntu
> 8.10 and require a password on wake up?  Thank you very much.
>
> -- Bhaskar
>
> P.S. Tried Google.  Others have the same problem, but no solutions.
>
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug