Ability to lock keyboard input to a single VM

[marmarek]

Reported by rafal on 8 Sep 2010 13:17 UTC
User should be able to temporarily lock keyboard input to a single VM, in order to prevent e.g. a new window created by VM2 from taking a focus when user is entering a password to a VM1 window. This also mitigates all "rogue VM window covered my window, I did not notice the changed decorations, and entered a password" attacks.
The procedure would be: user enters magic key combo (e.g. Ctrl-Shift-L). A notification is displayed about which VM gets exclusively keyboard input; if qubes_guid for other domain gets input, it will not pass keystrokes to VM.

Migrated-From: https://wiki.qubes-os.org/ticket/69

[marmarek]

Modified by joanna on 14 Mar 2011 21:26 UTC

[marmarek]

Modified by joanna on 14 Mar 2011 21:26 UTC

[marmarek]

Comment by joanna on 22 Jun 2011 10:52 UTC
We should focus on this after we finally decide on the default WM to run in Dom0... Moving to future release...

[marmarek]

Comment by joanna on 22 Jun 2011 10:52 UTC
We should focus on this after we finally decide on the default WM to run in Dom0... Moving to future release...

[marmarek]

Comment by joanna on 25 Sep 2011 11:10 UTC
This really is something that is Dom0 Window Manger specific. E.g. KDE that we use in Dom0 allows to set focus stealing prevention (which is a trade off between convenience and security).

In any case, this is not our problem...

[marmarek]

Comment by joanna on 25 Sep 2011 11:10 UTC
This really is something that is Dom0 Window Manger specific. E.g. KDE that we use in Dom0 allows to set focus stealing prevention (which is a trade off between convenience and security).

In any case, this is not our problem...

[marmarek]

Modified by clothHoke on 16 Oct 2014 18:37 UTC

[marmarek]

Modified by clothHoke on 16 Oct 2014 18:37 UTC