vlock + magic SysRQ key

["Luis M. Cruz" <lcruzva@xxxxxxxxxxxxxxxxxxx>]

FYI -- Raju

Apologies if you're getting this a second time -- scr*w-up in my
mailer system.

- ----------------
  Hi!

  Sorry if somebody has noticed this before or is only a stupid remark, but
a few days ago I found that you can kill vlock (and similar programs that
lock all linux consoles) with the alt+sysrq+k key combination on LiNUX 2.2.X
and 2.3.X (if you enabled magic keys when you compiled the kernel) so
someone could bypass the console locking and althought he cannot access the
session where vlock was ejecuted (because it has been killed), he can access
the other posibly opened sessions on other consoles. So, if you have enabled
the magic keys, using "vlock -a" is not secure!.

- --
Saludos del General...
 _______ _ .-.-. .-. .-.---.---.     ---------  Coordinador de LiMA  ------=
- ---
(  ____ ) \| | | | | | |    ) _ )    Asociaci=F3n de usuarios de LiNUX de M=
=E1laga
| |_   / _ \ | |_| \_/ |   \  _)           http://iaeste.cie.uma.es/lima
|  _ )/_/ \_\|___)\___/|_|\_\___)    --------------------------------------=
- ---
| |Correo-E: <luismc@xxxxxxxxxxxxxxxx>                  LiNUX Reg. User #58=
539
|_|Web: http://moon.inf.uji.es/~luismc                  failure en IRC-Hisp=
ano
   PGP keyID's: 0x6848D470 (DSS) / 0x255E9505 (RSA)
- --------------------------------------------------------------------
For more information on Linux in India visit http://www.linux-india.org/
The Linux India mailing list does not accept postings in HTML format.

------------------------------