News for hackers. Stuff that matters.

A comment on How to get root on Ubuntu 20.04 by pretending nobody’s /home. Parent comment

Re:How to get root on Ubuntu 20.04 by pretending nobody’s /home by j-james on Wednesday November 11, 2020 @04:19AM (#25056846)
Linux screen lockers are somewhat notorious for security-ish bugs like that. There's a project called XSecureLock that aims to address some of those, although I'm not sure if it fixes (or can fix) the restore-ram type bug you detailed.

https://github.com/google/xsecurelock

[ Parent | on HN ]
Re:How to get root on Ubuntu 20.04 by pretending nobody’s /home by NieDzejkob on Wednesday November 11, 2020 @09:07AM (#25058487)
When configured properly, xsecurelock does fix this type of bug. The key is to use the -l option of xss-lock, which passes a lock file descriptor to xsecurelock and waits for it to be closed before allowing the suspend.

https://github.com/google/xsecurelock#automatic-locking

[ Parent | on HN ]
Re:How to get root on Ubuntu 20.04 by pretending nobody’s /home by trilinearnz on Wednesday November 11, 2020 @03:13PM (#25062449)
That's really useful, thank you! Great to know that others share the same security concerns around this process. I will be sure to try this out.
[ Parent | on HN ]