Clemens Fries reported that, when using Cinnamon, it was possible to bypass the screensaver lock: http://seclists.org/oss-sec/2014/q1/327 An attacker with physical access to the machine could use this flaw to take over the locked desktop session. A patch is currently not yet available.
Created cinnamon tracking bugs for this issue: Affects: fedora-all [bug 1064697]
Note that a similar issue was reported [1], which causes cinnamon to freeze when holding the 'menu' key. The original patch fixed this issue for the 'super' key (aka windows key) but the issue pertains for the menu key. Patch at [2] solves this issue. A full explanation can be found at [3]. [1] https://github.com/linuxmint/Cinnamon/issues/3443 [2] https://github.com/mtwebster/cinnamon-screensaver/commit/da7af55f1fa966c52e15cc288d4f8928eca8cc9f [3] https://github.com/linuxmint/Cinnamon/issues/3443#issuecomment-53219893
(In reply to Martin Prpic from comment #2) > Note that a similar issue was reported [1], which causes cinnamon to freeze > when holding the 'menu' key. The original patch fixed this issue for the > 'super' key (aka windows key) but the issue pertains for the menu key. Patch > at [2] solves this issue. > > A full explanation can be found at [3]. > > [1] https://github.com/linuxmint/Cinnamon/issues/3443 > [2] > https://github.com/mtwebster/cinnamon-screensaver/commit/ > da7af55f1fa966c52e15cc288d4f8928eca8cc9f > [3] https://github.com/linuxmint/Cinnamon/issues/3443#issuecomment-53219893 Or better still is to fix the root cause. https://admin.fedoraproject.org/updates/gtk3-3.10.9-2.fc20 https://bugzilla.gnome.org/show_bug.cgi?id=722106
gtk3-3.10.9-2.fc20 has been pushed to the Fedora 20 stable repository. If problems still persist, please make note of it in this bug report.
fixed in gtk3