Claude a43e802810 v0.9.5-5: CRITICAL fix for boot password bypass via Ctrl+Alt+Del
CRITICAL SECURITY FIX:
- Fixed Ctrl+Alt+Del bypassing boot password requirement
  * Added isLockedOut check to showPowerMenu() function
  * Power menu (Shutdown/Restart/Reload) now blocked when system is locked out
  * Prevents bypassing boot password via Reload option
  * Also prevents bypassing inactivity lockout and time-based lockout

ROOT CAUSE:
The showPowerMenu() function was missing the isLockedOut check that other
navigation functions (nextTab, prevTab) already had. This allowed users to
press Ctrl+Alt+Del during boot password screen, select "Reload", and bypass
the password requirement entirely.

NAVIGATION TROUBLESHOOTING:
Added troubleshooting notes for users experiencing navigation issues:
- Check config.json for hidden sites (duration: -1)
- Hidden sites don't count toward navigation
- Need at least 2 visible sites for Ctrl+Tab/swipe to work

Includes all fixes from v0.9.5-4 (polkit restrictions, X server hardening,
autostart compatibility, xbindkeys fixes)
2025-11-21 22:31:48 +00:00
S
Description
Mirror of outis1one/ubuntu-based-kiosk from GitHub
GPL-3.0
4.1 MiB
Languages
Shell 94.1%
JavaScript 4.7%
HTML 0.9%
CSS 0.3%