Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | clear passwords with explicit_bzero | Hiltjo Posthuma | 2016-08-13 | 1 | -2/+6 |
| | | | | | | | | | | | | | | | | Make sure to explicitly clear memory that is used for password input. memset is often optimized out by the compiler. Brought to attention by the OpenBSD community, see: https://marc.info/?t=146989502600003&r=1&w=2 Thread subject: x11/slock: clear passwords with explicit_bzero Changes: - explicit_bzero.c import from libressl-portable. - Makefile: add COMPATSRC for compatibility src. - config.mk: add separate *BSD section in config.mk to simply uncomment it on these platforms. | ||||
* | Revert "No need for usage()" | Markus Teich | 2016-02-15 | 1 | -2/+15 |
| | | | | | | | | | | This reverts most of commit a6dc051e3744ce5b14c54d2d246d3e8258207e76 and fixes some related stuff: - keep spelling fixes from original commit - make -h and -v also work when followed by more arguments - any unknown flag prints usage - fix output of -v to display "slock: version 1.3" instead of "slock: slock-1.3" | ||||
* | revert using argv0 and minor fixup | Markus Teich | 2016-02-15 | 1 | -9/+6 |
| | | | | | | - use hardcoded "slock" instead of argv[0] - add "slock: " to fprintf calls, where it was missing - revert `argc--, argv++` shifting | ||||
* | Use argv0 instead of passing "slock:" to die every time | FRIGN | 2016-02-14 | 1 | -12/+16 |
| | |||||
* | No need for usage() | FRIGN | 2016-02-14 | 1 | -14/+2 |
| | | | | | | | | | | | | | | | | | There are 2 arguments why -v and -h are broken: 1) if you are running off git, -v will show the last stable release, effectively making this option useless. people running stable versions leave open an attack surface this way in case there are vulnerabilities found. 99% of the people are also using package managers to keep their software up to date, instead of running $TOOL -v to check how old it is. 2) -h is a sad excuse for not just looking at the manual page (man 1 slock). Given we accept a post_lock_command, we can't be as liberal and just intercept certain flags. I changed the manpage to reflect this change. | ||||
* | Simplify the oom-taming-function | FRIGN | 2016-02-14 | 1 | -14/+6 |
| | | | | | | | | | | | | There really is no need to source a defined variable from a linux header. The OOM-rank ranges from -1000 to 1000, so we can safely hardcode -1000, which is a sane thing to do given slock is suid and we don't want to play around too much here anyway. On another notice, let's not forget that this still is a shitty heuristic. The OOM-killer still can kill us (thus I also changed the wording in the error-message. We do not disable the OOM-killer, we're just hiding. | ||||
* | update copyright year in -v output | Markus Teich | 2016-02-11 | 1 | -1/+1 |
| | |||||
* | add hint for suid to oom error message | Markus Teich | 2016-01-29 | 1 | -1/+1 |
| | |||||
* | error messages on grab failure | Markus Teich | 2016-01-18 | 1 | -14/+16 |
| | |||||
* | code style fix | Markus Teich | 2016-01-18 | 1 | -18/+9 |
| | |||||
* | add option to run command after screen is locked | Markus Teich | 2015-12-26 | 1 | -2/+10 |
| | |||||
* | Don't change to failure colour on success | David Phillips | 2015-08-27 | 1 | -1/+1 |
| | |||||
* | Slightly safer OOM killer disablement in linux | David Phillips | 2015-07-06 | 1 | -1/+12 |
| | |||||
* | rework setting window color | Markus Teich | 2015-05-08 | 1 | -10/+7 |
| | |||||
* | consistently use () with sizeof | Markus Teich | 2015-05-08 | 1 | -2/+2 |
| | |||||
* | Option to not show failure color on clear | Nick Currier | 2015-05-08 | 1 | -3/+6 |
| | |||||
* | resize lockscreen window after Xrandr resize | Markus Teich | 2015-04-01 | 1 | -2/+16 |
| | |||||
* | Blank the screen with color 0, add third color for failed logins | David Phillips | 2015-04-01 | 1 | -9/+18 |
| | | | | | | | | | | | | | | | - Adds another color in config.def.h, COLOR_INIT - Renames the colours from numerical ones to ones with meaningful names; COLOR_INPUT for when there is content in the input buffer and COLOR_EMPTY for when the input buffer has been cleared (backspaced or a failed attempt). - Ensures XFreeColors frees the right number of colours. This is now derived from the size of `Lock->colors` rather than being an integer literal. - Makes slock exhibit the behaviour described by Markus The default colours are the same as the ones slock currently uses, with the exception of the new color, which I have set to red, as it indicates someone has either failed an attempt to unlock, or that they have entered input and erased it all. | ||||
* | applied Dimitris' style patch from Dec'14, with some minor modifications | Anselm R Garbe | 2015-01-27 | 1 | -52/+60 |
| | |||||
* | fixed usage string1.2 | Anselm R Garbe | 2014-12-22 | 1 | -1/+1 |
| | |||||
* | applied sin's patch and prepared new release | Anselm R Garbe | 2014-12-22 | 1 | -0/+2 |
| | |||||
* | end{pw,sp}ent() can only be called after get{pw,sp}ent() | sin | 2014-11-09 | 1 | -2/+0 |
| | | | | Calling them unconditionally can result in memory corruption. | ||||
* | Only check errno if getpwuid() fails | sin | 2014-07-09 | 1 | -4/+6 |
| | | | | Checking errno otherwise is unspecified. | ||||
* | Add /etc/passwd support | FRIGN | 2014-06-09 | 1 | -2/+2 |
| | | | | | Fix slock to work with /etc/passwd without /etc/shadow. while we're at it, remove an occurence of trailing whitespace. | ||||
* | Set errno to 0 before getpwuid() and check it afterwards | sin | 2014-01-29 | 1 | -1/+4 |
| | |||||
* | applied Robert Schneider's Linux suggestions, also bumped version and ↵ | Anselm R Garbe | 2013-08-02 | 1 | -8/+28 |
| | | | | updated LICENSE file's copyright notice | ||||
* | applied andres' multi-slock fix, thanks for spotting this issue | garbeam@gmail.com | 2012-08-02 | 1 | -3/+14 |
| | |||||
* | added Ben's password placeholder entry kludge | anselm@garbe.us | 2012-04-15 | 1 | -1/+1 |
| | |||||
* | applied Eckehard Bern's dualcolor patch to slock | anselm@garbe.us | 2012-03-17 | 1 | -5/+22 |
| | |||||
* | select for SubstructureRedirectMask as well | anselm@garbe.us | 2012-02-09 | 1 | -0/+2 |
| | |||||
* | fixed missing new lines | anselm@garbe.us | 2012-02-09 | 1 | -2/+2 |
| | |||||
* | typo fix | anselm@garbe.us | 2012-02-05 | 1 | -1/+1 |
| | |||||
* | added XRaiseWindow workaround when new clients are launched | anselm@garbe.us | 2012-02-05 | 1 | -51/+35 |
| | |||||
* | applied Michaels patch | garbeam@gmail.com | 2012-01-24 | 1 | -2/+4 |
| | |||||
* | added dummy error handler to prevent X from terminating slock just in case | anselm@garbe.us | 2012-01-22 | 1 | -8/+14 |
| | |||||
* | applied Markus' patch to die in case /etc/passwd is unavailable | Anselm R Garbe | 2011-04-21 | 1 | -0/+3 |
| | |||||
* | applied Fernando Silveira's multiscreen patch for old style multihead setups | Anselm R Garbe | 2009-11-26 | 1 | -69/+151 |
| | |||||
* | applied Ali Gholami Rudi's patch regarding DPMS timeout customization and ↵ | a@null | 2008-12-12 | 1 | -4/+9 |
| | | | | persistence | ||||
* | prepared release | Anselm R Garbe | 2008-07-29 | 1 | -3/+4 |
| | |||||
* | removed useless chars, prepared release | Anselm R Garbe | 2008-07-29 | 1 | -8/+6 |
| | |||||
* | s/d// | Anselm R Garbe | 2008-04-09 | 1 | -1/+1 |
| | |||||
* | yet another DPMS fix, still trying to prevent the error handler | Anselm R Garbe | 2008-04-09 | 1 | -1/+3 |
| | |||||
* | fixed DPMS crashing issue | Anselm R Garbe | 2008-04-08 | 1 | -3/+7 |
| | |||||
* | applied two patches, BSD_AUTH patch and Gottox' DPMS support patch0.8 | Anselm R Garbe | 2008-02-22 | 1 | -4/+30 |
| | |||||
* | removed Sander from -v by request | Anselm R. Garbe | 2007-11-25 | 1 | -1/+1 |
| | |||||
* | next version will be 0.8 | Anselm R. Garbe | 2007-11-24 | 1 | -1/+3 |
| | |||||
* | final fixes and cleanups0.7 | Anselm R. Garbe | 2007-11-24 | 1 | -16/+19 |
| | |||||
* | applied Ryan Sorensen bugfix which allows slock to acquire the keyboard grab ↵ | arg@suckless.org | 2007-11-13 | 1 | -1/+1 |
| | | | | asynchroneously | ||||
* | updating copyright stuff in slock as well | Anselm R. Garbe | 2007-04-13 | 1 | -4/+3 |
| | |||||
* | grab on the root window, it is correct, all lockers do that0.6 | Anselm R. Garbe | 2007-03-07 | 1 | -3/+2 |
| |