On Sat, 2007-12-08 at 08:26 -0500, Brett Serkez wrote: > On Dec 8, 2007 7:25 AM, Kulbir Saini <kulbirsaini@xxxxxxxxxxxxxxxxxxx> wrote: > > > > Problem: When I login to my system using 'vncviewer <IP>:0', i can access > > everything on the remote pc but the problem is the screen on server system > > (system with <IP>) unlocks and everything that I do remotely is replicated > > on the actual system. > > > > Somebody will say, wtf? it is designed to be so. But the problem is the > > screen unlocks and anybody in my lab can capture my system and do whatever > > he/she wants. > > > > Its a big security issue. > > > > And somebody may even get a heart attack when he/she sees that the mouse is > > static and no human being is near the pc and still the windows are opening > > and closing and some text is being typed in terminal :-O :P > > This is working as designed. You can use the vncserver daemon to > create virtual desktops, as many as the system resources of your > system can support, these will not be visible on the desktop. Then > you can connect to any of these virtual desktops from the console or > remotely as you desire. Actually, there are cases when a user or an administrator might need to remotely access the current running desktop session. Kulbir already mentioned one (something I myself have often wished ... access to my IM client from whatever workstation I'm on without interrupting connection). In such cases, I like the idea that the screensaver stops and allows the activity on the desktop to show (if I were the user, I wouldn't want anyone accessing my machine without my knowing it if I was sitting in front of it with the screen locked). However, I wouldn't want the keyboard or mouse to be active, either (still requiring an unlock). If that were to be a feature request (or even a security review), against what component should it be reported to? Does screensaver even support just input-locking? -- Richi Plana -- fedora-devel-list mailing list fedora-devel-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-devel-list
