Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Submit feedback
Contribute to GitLab
Sign in
Toggle navigation
tails
Project overview
Project overview
Details
Activity
Releases
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Charts
Packages
Packages
Container Registry
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Jobs
Commits
Open sidebar
Joshua McKee
tails
Commits
c5f03235
Commit
c5f03235
authored
Jul 22, 2019
by
sajolida
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
We already have a screen locker
parent
81db1f65
Changes
1
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
0 additions
and
80 deletions
+0
-80
wiki/src/blueprint/screen_locker.mdwn
wiki/src/blueprint/screen_locker.mdwn
+0
-80
No files found.
wiki/src/blueprint/screen_locker.mdwn
deleted
100644 → 0
View file @
81db1f65
[[!meta title="Screen locker"]]
The screen of a Tails session can be locked through the system menu, or by invoking the tails-screen-locker script directly.
The ticket that tracked this work was [[!tails_ticket 5684]].
This is useful for example for
journalists that want to be able to leave their computer unattended in
their office to go to the toilets for a minute and have their screen
locked.
[[!toc]]
How do other live distributions do that?
========================================
- [Knoppix](http://www.knoppix.org/)
- No password whatsoever → not possible to lock (or unlock!)
- http://www.linux-magazine.com/Online/Features/Getting-Started-with-Knoppix-7.3
- Base: Debian
- Desktop: KDE
- Might be interested in our solution.
- [Grml](http://grml.org/)
- Already have a custom script called
[grml-lock](https://github.com/grml/grml-scripts/blob/master/usr_bin/grml-lock)
which is a wrapper around vlock that asks for a password on first use.
- Base: Debian
- Desktop: fluxbox
- [Jondo Live](https://anonymous-proxy-servers.net/en/jondo-live-cd.html)
- Ask for user password on boot, then I didn't find a way of locking the
screen xlock. No xlock.
- Base: Debian
- Desktop: XFCE
- [Kali](http://www.kali.org/)
- Lock screen through GNOME and the default 'toor' password.
- Base: Debian
- Desktop: GNOME
- Low interest in our solution as Kali is not mainly used in live environment.
- [Tanglu](http://www.tanglu.org/)
- Lock screen through GNOME and the default 'live' password.
- Base: Debian
- Desktop: GNOME
- [Debian Live](https://www.debian.org/devel/debian-live/)
- Lock screen through GNOME and the default 'live' password.
- Base: Debian
- Desktop: GNOME
Which password to use?
======================
It is already possible to set an administration password from Tails
Greeter, and we could reuse it for unlocking the screen. But we also
need a solution for when no administration password has been set.
During the [[201412 monthly meeting|contribute/meetings/201412/]] we
proposed to prompt for a password before locking the screen for the
first time, if there is no administration password.
How to activate it?
===================
- Through the better power off button (#5322).
- Through the usual GNOME shortcut: Meta+L
- If a password has been set already:
- Automatically after X minutes of idle.
- When closing the lid.
Implementation
==============
An initial implementation was started in [[!tails_gitweb_branch
feature/better_power_off_button]], and reverted since it turned out to be more
complicated than originally thought. This implementation and the problems
listed below were discussed on the tails-dev ML in November 2012.
Ideas to implement the password prompt before the first locking:
- Use a different PAM config for the screensaver
- Turn the admin password into the root one, and use the user
password's as the locker's one.
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment