Thank you. I will double check and then report if it is well-founded. <div class="gmail_quote"><div dir="ltr">On Mon, Feb 6, 2017, 10:27 Yves-Alexis Perez, <<a href="mailto:corsac@debian.org">corsac@debian.org</a>> wrote: </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On Sun, 2017-02-05 at 06:00 +0000, Alexis Hunt wrote: > I'm not sure if this is actually a bug or a misconfiguration on my system, > but I have discovered a major security vulnerability in screen locking > (dm-tool lock), and I would like some advice on how to proceed with it. I > didn't see a bug tracker or anything on the website and do not want to send > out what could be major security bug to a public mailing list. > > My system is Debian testing and I use Xmonad as my WM. You can either report privately to the Debian security team (team@security.deb <a href="http://ian.org" rel="noreferrer" class="gmail_msg" target="_blank">ian.org</a>) or open a launchpad bug and tag it security (so it will be private). Note that dm-tool lock won't actually lock anything but (as indicated in the manpage) switch to a greeter with a hint that the screen is locked. If you don't have something doing the actual lock (like light-locker) then nothing will happen. Regards, -- Yves-Alexis</blockquote></div>