Last weekend I sat down and set into code a project that has been living in my head rent-free for some time: µlock (a.k.a: ulock). ulock is a minimal Wayland screen-locker, designed to work without relying on any shadow entry is stored in /etc/tcb/$USER/shadow instead of /etc/shadow, and each user has permissions to read their own encrypted password’s hash (and to edit it, depending on the administrator’s policy). I works in environments where setuid binaries are disabled entirely (but is not...

Read the original article