https://github.com/tuxxy/secure-slock
A paranoid (and updated!) fork of slock
https://github.com/tuxxy/secure-slock
Last synced: 3 months ago
JSON representation
A paranoid (and updated!) fork of slock
- Host: GitHub
- URL: https://github.com/tuxxy/secure-slock
- Owner: tuxxy
- License: gpl-3.0
- Created: 2019-01-23T03:14:57.000Z (over 6 years ago)
- Default Branch: master
- Last Pushed: 2022-03-23T18:40:54.000Z (about 3 years ago)
- Last Synced: 2025-01-07T10:43:16.072Z (5 months ago)
- Language: C
- Size: 103 KB
- Stars: 1
- Watchers: 3
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# secure-slock - a paranoid fork of suckless' slock
Inspired by [chjj's fork of slock](https://github.com/chjj/slock/)
## Changes from slock
- This fork of slock is based on the latest commit from 25 MAR 2017
- [35633d45672d14bd798c478c45d1a17064701aa9](https://git.suckless.org/slock/commit/35633d45672d14bd798c478c45d1a17064701aa9.html)
- I will keep it updated with the latest patches, when possible.
- Automatic shutdown - The screenlocked machine will automatically shutdown if:
1. The wrong password is entered more than `UNLOCK_ATTEMPTS_MAX` times (by default 3), or
2. ALT/CTRL/F1-F13 is pressed to switch VTs or to try to kill the X server. Also, if ALT+SYSRQ is attempted to be used.
- To use this, add the following to your `/etc/sudoers` file:
- `[username] [hostname] =NOPASSWD: /usr/bin/shutdown -h now`
- Replace `[username]` and `[hostname]` with the username and hostname of your machine.
- Process killing countermeasures - prevents an attacker from using Alt+sysrq and Ctrl+Alt+Backspace by disabling it before shutdown.
- To use this, add the following to your `/etc/sudoers` file:
- `[username] [hostname] =NOPASSWD: /usr/bin/tee /proc/sys/kernel/sysrq`
- Replace `[username]` and `[hostname]` with the username and hostname of your machine.
- Relicensed under the GPLv3
- Any new changes to the source are licensed under GPL, the original slock code is licensed under the MIT license. It is also included in `MIT_LICENSE`.
## Installation
- Edit `config.mk` to match your local machine, if needed. Slock will be installed into the `/usr/local` namespace by default.
- Edit `config.def.h` with your desired changes.
- Then rename it to `config.h`.
- Build slock (as root, if neccessary):
```
$ make clean install
```
## Coming Soon
- BadUSB protection
- Alarms
- Custom lock screen
- Perhaps more?