Add a section on security considerations

[slock.git] / config.def.h

diff --git a/config.def.h b/config.def.h
index 4bccb5d..6fba2b6 100644 (file)
--- a/config.def.h
+++ b/config.def.h
@@ -1,5 +1,12 @@
+/* user and group to drop privileges to */
+static const char *user  = "nobody";
+static const char *group = "nogroup";
+
 static const char *colorname[NUMCOLS] = {
        "black",     /* after initialization */
        "#005577",   /* during input */
-       "#CC3333",   /* failed/cleared the input */
+       "#CC3333",   /* wrong password */
 };
+
+/* treat a cleared input like a wrong password */
+static const int failonclear = 1;