From 697fad2bae52c50ab11b3ab44ecc6e95325ec1c8 Mon Sep 17 00:00:00 2001
From: Bobby Rong <rjl931189261@126.com>
Date: Wed, 25 Sep 2024 21:59:02 +0800
Subject: [PATCH] cinnamon.cinnamon-screensaver: Ignore shift-f10 keybinding

Fixes a lock screen bypass vulnerability, on nixos-unstable this is fixed in 6.2.1.
---
 .../desktops/cinnamon/cinnamon-screensaver/default.nix | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/pkgs/desktops/cinnamon/cinnamon-screensaver/default.nix b/pkgs/desktops/cinnamon/cinnamon-screensaver/default.nix
index 6ed8c0247ba2..305563272511 100644
--- a/pkgs/desktops/cinnamon/cinnamon-screensaver/default.nix
+++ b/pkgs/desktops/cinnamon/cinnamon-screensaver/default.nix
@@ -1,6 +1,7 @@
 { lib
 , stdenv
 , fetchFromGitHub
+, fetchpatch
 , pkg-config
 , meson
 , ninja
@@ -37,6 +38,15 @@ stdenv.mkDerivation rec {
     hash = "sha256-ncYE2dCIAQxCMCe/5zrDU9iHTIkw+iO/IQl8+pfTvLI=";
   };
 
+  patches = [
+    # keybindings: Ignore shift-f10 (alternate menu popup shortcut).
+    # https://github.com/linuxmint/cinnamon-screensaver/issues/462
+    (fetchpatch {
+      url = "https://github.com/linuxmint/cinnamon-screensaver/commit/bda58ec0226e94dfe388863f7a9438414a5e110f.patch";
+      hash = "sha256-IIQhIQtOlJZqGMebCB1phqcQMb+aXbgB4Wzl0CpVJEQ=";
+    })
+  ];
+
   nativeBuildInputs = [
     pkg-config
     wrapGAppsHook3