Bug 376526 - Clipboard text available for pastingwhen lock screen visible
Summary: Clipboard text available for pastingwhen lock screen visible
Status: RESOLVED FIXED
Alias: None
Product: kscreenlocker
Classification: Plasma
Component: greeter (show other bugs)
Version: unspecified
Platform: Other Linux
: NOR normal
Target Milestone: ---
Assignee: Plasma Bugs List
URL: https://phabricator.kde.org/D4650
Keywords:
: 358684 383768 (view as bug list)
Depends on:
Blocks:
 
Reported: 2017-02-16 00:54 UTC by bluescreenavenger
Modified: 2017-08-21 17:19 UTC (History)
4 users (show)

See Also:
Latest Commit:
Version Fixed In: 5.10
Sentry Crash Report:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description bluescreenavenger 2017-02-16 00:54:53 UTC
Inspired by https://hexatomium.github.io/2017/02/15/windows10-clipboard-lockscreen/
I decided to see if this works in KDE. While it seems with the greeter, there is no way to see the contents in plain text, the password field does get filled with the contents of the clipboard.

With this I guess, could allow someone to unlock the screen in the unlikely and ill advisable scenario that the user copies their password, then locks the screen

This is under X11, I have not tested Wayland yet.
Comment 1 Martin Flöser 2017-02-17 17:15:53 UTC
Git commit cae1e82fc94f23f735ae3c189030505a95810cb5 by Martin Gräßlin.
Committed on 17/02/2017 at 15:23.
Pushed by graesslin into branch 'master'.

[greeter] Clear clipboard on show

Summary:
As we have a feature to show the password it would be possible for an
unauthorized user to get access to the clipboard.

To prevent this, the clipboard gets cleared when we have the window
shown. This is late enough on Wayland to be able to clear the clipboard.
FIXED-IN: 5.10

Test Plan:
On Wayland, paste is no longer possible. X11 is untested,
there klipper might restore clipboard content.

Reviewers: #plasma

Subscribers: plasma-devel

Tags: #plasma

Differential Revision: https://phabricator.kde.org/D4650

M  +2    -0    greeter/greeterapp.cpp

https://commits.kde.org/kscreenlocker/cae1e82fc94f23f735ae3c189030505a95810cb5
Comment 2 Martin Flöser 2017-02-22 15:47:12 UTC
*** Bug 358684 has been marked as a duplicate of this bug. ***
Comment 3 Christoph Feck 2017-08-21 17:19:42 UTC
*** Bug 383768 has been marked as a duplicate of this bug. ***