3 ms·
Against what threat model? The general answer is "yes, most of them, including all the ones being used as defaults in major distros" -- they will not allow a us
by delroth 6y ago
Against what threat model? The general answer is "yes, most of them, including all the ones being used as defaults in major distros" -- they will not allow a user that isn't in possession of the password to log back into the session.
They don't necessarily prevent against other threat models, like "the attacker dumps the laptop's RAM" (which you could technically protect against if you froze all session processes and encrypted their working set with a key held in a secure element).