v0.9.5-3: CRITICAL security and compatibility fixes

Browse Source

CRITICAL SECURITY FIXES:
- Fix Ctrl+Alt+Del bypass vulnerability by restricting polkit permissions
  * Changed org.freedesktop.login1.* to specific power operations only
  * Prevents session/VT switching that bypassed kiosk security
- Add X server ServerFlags to block dangerous key combinations
  * Disable VT switching (Ctrl+Alt+F1-F12) with DontVTSwitch
  * Disable X server kill (Ctrl+Alt+Backspace) with DontZap
  * Add AllowClosedownGrabs protection
- Enhance LightDM greeter security settings

COMPATIBILITY FIXES:
- Fix autostart script errors ([[: not found) by converting bash-specific
  [[ ]] syntax to POSIX-compliant [ ] syntax
- Fix xbindkeys errors by creating empty .xbindkeysrc file

These fixes address:
1. Security vulnerability where Ctrl+Alt+Del could bypass password login
2. /home/kiosk/.config/openbox/autostart: 125: [[: not found errors
3. xbindkeys_autostart: line 24: CONF: unbound variable errors

...

This commit is contained in:

Claude

2025-11-21 22:00:20 +00:00

parent 7228cbb6bb

commit e8ad3bbf0d

1 changed files with 9883 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

install_kiosk_0.9.5-3.sh

+9883

File diff suppressed because it is too large Load Diff