v0.9.5-4: CRITICAL security and compatibility fixes

Browse Source

This release addresses critical security vulnerabilities and compatibility issues:

CRITICAL SECURITY FIXES:
- Fix Ctrl+Alt+Del bypass vulnerability
  * Restricted polkit permissions from org.freedesktop.login1.* (ALL actions)
    to only specific power operations (power-off, reboot, suspend)
  * Prevents session switching and VT access that bypassed kiosk security
- Add X server ServerFlags to block dangerous key combinations
  * DontVTSwitch: Disable VT switching (Ctrl+Alt+F1-F12)
  * DontZap: Disable X server kill (Ctrl+Alt+Backspace)
  * AllowClosedownGrabs: Prevent client disconnection exploits
- Enhanced LightDM greeter security
  * Hide user list, disable manual login, disable guest account

COMPATIBILITY FIXES:
- Fix autostart script errors ([[: not found)
  * Converted bash-specific [[ ]] to POSIX-compliant [ ] syntax
  * Fixed display schedule and quiet hours conditional logic
- Fix xbindkeys startup errors
  * Now creates empty .xbindkeysrc file to prevent errors

Includes all fixes from v0.9.5-3 (time extensions, manual navigation)

...

This commit is contained in:

Claude

2025-11-21 22:05:55 +00:00

parent e8ad3bbf0d

commit 6201b2cc4d

1 changed files with 9887 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

install_kiosk_0.9.5-4.sh

+9887

File diff suppressed because it is too large Load Diff