Claude
6201b2cc4d
This release addresses critical security vulnerabilities and compatibility issues:
CRITICAL SECURITY FIXES:
- Fix Ctrl+Alt+Del bypass vulnerability
* Restricted polkit permissions from org.freedesktop.login1.* (ALL actions)
to only specific power operations (power-off, reboot, suspend)
* Prevents session switching and VT access that bypassed kiosk security
- Add X server ServerFlags to block dangerous key combinations
* DontVTSwitch: Disable VT switching (Ctrl+Alt+F1-F12)
* DontZap: Disable X server kill (Ctrl+Alt+Backspace)
* AllowClosedownGrabs: Prevent client disconnection exploits
- Enhanced LightDM greeter security
* Hide user list, disable manual login, disable guest account
COMPATIBILITY FIXES:
- Fix autostart script errors ([[: not found)
* Converted bash-specific [[ ]] to POSIX-compliant [ ] syntax
* Fixed display schedule and quiet hours conditional logic
- Fix xbindkeys startup errors
* Now creates empty .xbindkeysrc file to prevent errors
Includes all fixes from v0.9.5-3 (time extensions, manual navigation)