Bug 33530

Summary:	xscreensaver does not trap <Alt><Ctrl><Backspace> - No security
Product:	Gentoo Linux	Reporter:	Mark Knecht <markknecht>
Component:	Current packages	Assignee:	Gentoo Linux bug wranglers <bug-wranglers>
Status:	RESOLVED INVALID
Severity:	normal
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Mark Knecht 2003-11-14 20:31:37 UTC

On multiple systems, with more or less standard make.conf values, I have found
that xscreensaver (or XFree86 I suppose) is not trapping <Alt><Ctrl><Backspace>
and hence does not provide the expected security. IT drops me into whatever
user's console started X and I now get the account.

Reproducible: Always
Steps to Reproduce:
1. simply hit <Alt><Ctrl><Backspace>
Actual Results:  
console access

Expected Results:  
Screen should remain locked.

Severity is normal or extrememly severe, based on your point of view I suppose.

Comment 1 Seemant Kulleen (RETIRED) gentoo-dev

2003-11-14 20:37:45 UTC

*** Bug 33531 has been marked as a duplicate of this bug. ***

Comment 2 Mr. Bones. (RETIRED) gentoo-dev

2003-11-14 22:56:29 UTC

This isn't a bug.  This is the way things are supposed to work.  If you
don't want people to get to the shell behind X, exec is the answer.  If
you don't want the X server to exit with C-A-Backspace, NoZap is the answer.
Reading the docs on xscreensaver would be helpful for you.

This FAQ, in particular:
http://www.jwz.org/xscreensaver/faq.html#no-ctl-alt-bs