mate-desktop / marco

MATE default window manager
https://mate-desktop.org
GNU General Public License v2.0
193 stars 86 forks source link

marco: Add cmdline option --no-keybindings for disabling all key bind… #723

Closed sunweaver closed 2 years ago

sunweaver commented 2 years ago

…ings directly on WM startup.

The marco WM is used in Arctica Greeter [1]. There recently has a security issue been detected where people could open applications via marco keybindings inside the greeter (display manager) session. . A work-around could be evoking marco-message after marco startup and disable all keybindings then. However, a more preferred fix is provided by this patch: start-up marco with keybindings disabled from the beginning.

lukefromdc commented 1 year ago

For disabling keybindings to be a commandline option and not the default on starting marco in a normal MATE session should create no problems and allow Arctica Greeter to fix that security issue. That's an ugly problem, especially if someone could get to a terminal window through it.