summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorFRIGN <dev@frign.de>2016-09-28 20:20:51 +0200
committerMarkus Teich <markus.teich@stusta.mhn.de>2016-09-28 22:01:58 +0200
commitbd069b08c5fe4fea3c78f6991a849b19ed40cbe0 (patch)
tree6ef0f060c86bd634193ca467f2479792156d13b8
parent2d85c5baed4c4b4ecc19f7934fac1fc6a5b5c410 (diff)
downloadslock-bd069b08c5fe4fea3c78f6991a849b19ed40cbe0.tar.gz
slock-bd069b08c5fe4fea3c78f6991a849b19ed40cbe0.tar.xz
Add a section on security considerations
The section on security considerations sheds some light on the problems that we can't solve within slock but which the user has to solve in his X configuration.
-rw-r--r--slock.112
1 files changed, 12 insertions, 0 deletions
diff --git a/slock.1 b/slock.1
index 2b2b7c8..82cdcd6 100644
--- a/slock.1
+++ b/slock.1
@@ -17,6 +17,18 @@ is executed after the screen has been locked.
.It Fl v
Print version information to stdout and exit.
.El
+.Sh SECURITY CONSIDERATIONS
+To make sure a locked screen can not be bypassed by switching VTs
+or killing the X server with Ctrl+Alt+Backspace, it is recommended
+to disable both in
+.Xr xorg.conf 5
+for maximum security:
+.Bd -literal -offset left
+Section "ServerFlags"
+ Option "DontVTSwitch" "True"
+ Option "DontZap" "True"
+EndSection
+.Ed
.Sh EXAMPLES
$
.Nm