Changes:
1.4
---
- fix CVE-2016-6866
- add proper priviledge dropping
- use explicit_bzero from OpenBSD to clear password from memory
- major code audit and rewrite of some parts (thanks, Laslo!)
Approved by <reed>
o slock also needs x11/libXinerama
o Bump _XOPEN_SOURCE version to 600 in order to avoid build issues on SunOS.
o While here also fix some cosmetical issues providing a better SUBST_MESSAGE
for "makefile" class and also accept possible user-defined CPPFLAGS.
pkgsrc changes:
- Delete NO_CONFIGURE (it is not needed and sometimes can be harmful)
Changes:
The changes since version 1.2 are:
- bugfix: The cover window now resizes correctly when new screens are added or
the resolution is changed while the lock is active.
- new: slock now has a third color. The three colors are used for startup,
typing and failed login attempt.
- new: slock now allows to run any command after the screen has been locked, for
example suspending to ram.
- slock now has a man page.
- a few small fixes and code style updates to make it more consistent with the
rest of the suckless projects.
ok reed@
Problems found locating distfiles:
Package modular-xorg-server: missing distfile xorg-server-1.17.4.tar.bz2
Package py-qt4: missing distfile PyQt-mac-gpl-4.11.1.tar.gz
Package xservers: missing distfile xservers-3.3.6.5.tar.bz2
Package xview-clients: missing distfile xview3.2p1-X11R6.tar.gz
Package xview-lib: missing distfile xview3.2p1-X11R6.tar.gz
Otherwise, existing SHA1 digests verified and found to be the same on
the machine holding the existing distfiles (morden). All existing
SHA1 digests retained for now as an audit trail.
(pkgsrc)
- Instead of using do-* in Makefile adjust config.mk and use the
official Makefile like other suckless.org packages (e.g. x11/dmenu).
- Do not install README: the only useful information for the user was:
Simply invoke the 'slock' command. To get out of it, enter your
password. The user can read that in x11/slock/DESCR by
pkg_info slock.
(upstream)
* slock-1.2:
- Colors are now specified via config.h
- Minor bug fixes
* slock-1.1:
- Eckhards dualcolor patch
- Minor bug fixes
Add license and change homepage.
No changes file included in source distribution.
Changes can be seen at http://hg.suckless.org/slock/ (see changelog
for last few versions).
One important fix is:
added XRaiseWindow workaround when new clients are launched
See http://secunia.com/advisories/48700/ for the security issue.
Based on package from pkgsrc-wip, but updated. I changed
the maintainer because I didn't hear back about my changes.
From description:
Simple screen locker for X.
It blanks the screen and hides the pointer. To unlock, type in
your password and press Enter. The Escape key resets input and it
beeps on wrong password.
