1

While modifying the Gnome Tweak Tool I saw the following option which states that allowing breaking grabs with keyboard actions poses a security risk.

enter image description here

How can it be a security risk?

2

From here:

The bug allows users to work around screen locking (e.g. gnome-screensaver) by hitting Control+Alt+keypad multiply or Control+Alt+keypad divide. This terminates the input grab the screensaver has and thus allows a user to interact with the desktop, skipping the password entry.

Therefore enabling this feature will allow the screensaver lock to be bypassed.

1

It can be a security risk because an unwanted application may use that for additional control of the KB functions.

The confirmed security risk is in the case of wireless KB connectivity, as this can be used for eavesdropping, and if such a thing happens it may be hard to debug/identify.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for?Browse other questions tagged or ask your own question.