 Claude
|
e8ad3bbf0d
|
v0.9.5-3: CRITICAL security and compatibility fixes
CRITICAL SECURITY FIXES:
- Fix Ctrl+Alt+Del bypass vulnerability by restricting polkit permissions
* Changed org.freedesktop.login1.* to specific power operations only
* Prevents session/VT switching that bypassed kiosk security
- Add X server ServerFlags to block dangerous key combinations
* Disable VT switching (Ctrl+Alt+F1-F12) with DontVTSwitch
* Disable X server kill (Ctrl+Alt+Backspace) with DontZap
* Add AllowClosedownGrabs protection
- Enhance LightDM greeter security settings
COMPATIBILITY FIXES:
- Fix autostart script errors ([[: not found) by converting bash-specific
[[ ]] syntax to POSIX-compliant [ ] syntax
- Fix xbindkeys errors by creating empty .xbindkeysrc file
These fixes address:
1. Security vulnerability where Ctrl+Alt+Del could bypass password login
2. /home/kiosk/.config/openbox/autostart: 125: [[: not found errors
3. xbindkeys_autostart: line 24: CONF: unbound variable errors
|
2025-11-21 22:00:20 +00:00 |
|