Commit Graph

7 Commits

Author SHA1 Message Date
landry
e9ec1693c7 Fix a nasty race condition/crash reported by 'goebbels@wp.pl' : when an
X session finishes, slim goes to restart X, but if the machine is being
halted, slim gets a SIGTERM, and the signal handler tries to kill the X
server without checking if is has been restarted yet. Boom.
While here, fix xauth path.
2009-11-05 19:05:12 +00:00
landry
b6a02eab6a Add a bunch of patches to fix CVE-2009-1756, also reported in debian bz
#529306 & FreeBSD PR134801 :
The security issue is caused by slim generating the X authority file
by passing the X authority cookie via the command line to "xauth".
This can be exploited to disclose the X authority cookie by consulting
the process list and e.g. gain access the user's display.
While here, use slightly better random seeding for cookie generation.

Patches adapted from the ones provided to debian/FreeBSD by Eygene Ryabinkin <rea@codelabs.ru>
2009-09-04 20:24:25 +00:00
pea
dd3c1972ee Upgrade to 1.3.1
Initial diff by me with tweaks by landry@ and ajacoutot@

OK landry@ ajacoutot@
2008-11-05 13:36:41 +00:00
espie
17d70806a3 tweak FAKE_FLAGS semantics to saner defaults. 2008-01-04 17:48:33 +00:00
landry
977cad4e9d Provide saner defaults for slim.conf, use sh -l instead of sh - to make it
read $HOME/.profile. Reported by Rodolfo Gouveia, thanks !

ok jasper@
2007-12-30 10:46:49 +00:00
landry
526c868956 Don't use MULTI_PACKAGES when it's not needed, requested by espie@.
With tweaks from steven@ and espie@, ok ajacoutot@ espie@.
2007-10-25 09:30:13 +00:00
landry
34bd294035 Import slim, a lightweight graphical login manager.
Additional themes availables in -themes subpackage.

Testing and feedback from kili@ and ajacoutot@, ok ajacoutot@ and jasper@
2007-10-24 23:32:00 +00:00