Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!xlned.com!feeder1.xlned.com!newsfeed.xs4all.nl!newsfeed4.news.xs4all.nl!xs4all!newsgate.cistron.nl!newsgate.news.xs4all.nl!post.news.xs4all.nl!not-for-mail Return-Path: X-Original-To: python-list@python.org Delivered-To: python-list@mail.python.org X-Spam-Status: OK 0.002 X-Spam-Evidence: '*H*': 1.00; '*S*': 0.00; 'root': 0.05; 'subject:code': 0.07; 'remotely,': 0.09; 'subject:while': 0.09; 'system?': 0.09; 'things,': 0.09; 'works.': 0.09; 'cc:addr:python- list': 0.11; 'gui': 0.12; '12:50': 0.16; 'administer': 0.16; 'from:addr:rosuav': 0.16; 'from:name:chris angelico': 0.16; 'pressing': 0.16; 'screen,': 0.16; 'ssh,': 0.16; 'subject:GUI': 0.16; 'underlying': 0.16; 'subject:python': 0.16; 'sat,': 0.16; 'wrote:': 0.18; 'else,': 0.19; '>>>': 0.22; 'aug': 0.22; 'cc:addr:python.org': 0.22; 'instance,': 0.24; 'cc:2**0': 0.24; 'login': 0.25; 'sort': 0.25; 'equivalent': 0.26; 'right.': 0.26; 'switch': 0.26; '(for': 0.26; 'header:In-Reply-To:1': 0.27; 'tried': 0.27; 'leave': 0.29; 'am,': 0.29; 'unix': 0.29; 'message- id:@mail.gmail.com': 0.30; 'that.': 0.31; "d'aprano": 0.31; 'prevention': 0.31; 'steven': 0.31; 'allows': 0.31; 'linux': 0.33; 'running': 0.33; 'fri,': 0.33; 'maybe': 0.34; 'display': 0.35; 'something': 0.35; 'received:google.com': 0.35; 'subject:one': 0.36; 'should': 0.36; 'virtual': 0.37; 'so,': 0.37; 'manager': 0.38; 'desirable': 0.38; 'does': 0.39; 'users': 0.40; 'even': 0.60; 'most': 0.60; 'name': 0.63; 'risk': 0.72; 'locked': 0.84; 'subject:Keep': 0.84; 'device,': 0.91; 'graphical': 0.91; 'to:none': 0.92; 'pc.': 0.93 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:cc :content-type; bh=a3jtSTIBW2MWYAaYwkdZWtl46DQoI0/MiUKTsZ2Ucb8=; b=NBu/R8dpdflxO1nIt9M6Y9AnGTXv/6mR+Yl/DblUbelstHNmHhrgx9FQNE68lW4KTA IWqVwo+zroOslHAU/MfLOWawJYzn6mTODBY4IeRotjgb4IOud2xIPfIXWUd7SpND3772 YH0IltWICImdykEd/VJwcRbdDUJXvzBG3fUilWo0dNKYyuHuD1686iKD4DCiuiMWcRy1 4JuDAhaLP57HSfDbL2o3aHN7GC+OtoDyEbnPwWv63hEVWvEYkmJOgGggyNwP75FvlfZs n/AAxplVQ3gbsPZxqh5hRluu4vqb5fOE1iJ/Jmslsa819k/mErSF8b74pBtopVm2wPrA tkdw== MIME-Version: 1.0 X-Received: by 10.50.176.202 with SMTP id ck10mr6185025igc.2.1407510092325; Fri, 08 Aug 2014 08:01:32 -0700 (PDT) In-Reply-To: References: <32f85c79-17a1-4d2f-a926-43812b8083ed@googlegroups.com> <85fvh7icj4.fsf@rudin.co.uk> <53e4d7a0$0$24963$c3e8da3$5496439d@news.astraweb.com> Date: Sat, 9 Aug 2014 01:01:32 +1000 Subject: Re: Keep one GUI always on TOP while python code is running From: Chris Angelico Cc: "python-list@python.org" Content-Type: text/plain; charset=UTF-8 X-BeenThere: python-list@python.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: General discussion list for the Python programming language List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Newsgroups: comp.lang.python Message-ID: Lines: 28 NNTP-Posting-Host: 2001:888:2000:d::a6 X-Trace: 1407510095 news.xs4all.nl 2868 [2001:888:2000:d::a6]:59943 X-Complaints-To: abuse@xs4all.nl Xref: csiph.com comp.lang.python:75895 On Sat, Aug 9, 2014 at 12:50 AM, alister wrote: > On Fri, 08 Aug 2014 23:58:56 +1000, Steven D'Aprano wrote: >> >>> (for instance, on all my Linux systems, I can hit Ctrl-Alt-F1 to switch >>> away from the GUI altogether). >> >> Does that work when xscreensaver or equivalent has locked the system? If >> so, >> that's a security vulnerability. > > I have not tried b=ut is should not be a security risk as you still have > to log into the virtual terminal. > > this may even be desirable if multiple people may administer the PC. Right. Unix has as its underlying philosophy that users and processes are the most important things, not interfaces. I can log in to a computer at a virtual terminal by pressing Ctrl-Alt-F1, or with a graphical login manager like lightdm, or via ssh, or something else, and everything works. And if I leave something running under my user name that allows me to connect remotely, or maybe have something running as root that can hook in to some sort of user event (off a USB device, or a secondary mouse, or whatever) that can then display something on the screen, then no amount of login prevention will change that. ChrisA