[Nix-dev] slock

[Eelco Dolstra]

Hi,

On 12/01/2011 08:57 AM, Peter Simons wrote:

>  >>  $ slock
>  >>  slock: cannot retrieve password entry (make sure to suid slock)
>  >
>  > I use security.setuidPrograms = [ "slock" ]; Dunno if it's possible to
>  > run such software from unprivileged user.
> 
> well, I'm not an expert in these matters, but xlockmore does not require
> super user privileges, so I guess it's possible in principle.

Screensavers nowadays shouldn't require setuid privileges to check the password,
since PAM already provides a setuid helper for that (unix_chkpwd).  But it seems
slock doesn't use PAM...

-- 
Eelco Dolstra | http://www.st.ewi.tudelft.nl/~dolstra/