xorg-server enables exiting of screen savers without providing a password. Reproducible: Always Steps to Reproduce: 1.Lock screen (e.g. xscreensaver) 2.Press ALT+CTRL+numeric keypad * 3. Actual Results: xscreensaver is killed Expected Results: xscreensaver is not killed
See http://seclists.org/oss-sec/2012/q1/197
*** This bug has been marked as a duplicate of bug 399347 ***