OpenLock
github.com
What it is
OpenLock is a free, open-source lockdown exam browser built natively for Linux. It aims to provide Safe Exam Browser-style controls, but the project states that it is not exam-ready because SEB key derivation is not byte-exact and the LMS handshake currently fails. It parses .seb files and sends Browser Exam Key and Config Key headers, although those keys do not yet match an LMS handshake. Kiosk mode uses fullscreen takeover through X11 or Wayland/Cage. A process guard monitors and terminates prohibited software such as screen recorders, virtual machines, and remote desktop tools. Input controls block shortcuts including Alt+Tab, Alt+F4, Ctrl+C, and PrintScreen, while browser hardening disables developer tools, downloads, right-click, console access, and drag-and-drop. Security measures include URL filtering, cgroups v2 isolation, VM/debugger/hypervisor detection, optional self-hash checks, and an off-the-record profile. Moodle, Canvas, and Blackboard adapters are listed but not validated live.
Spec sheet
- Purpose
- OpenLock is an open-source lockdown exam browser for Linux intended to bring Safe Exam Browser style exam lockdown to Linux distributions.Read 30 Sep 2026 · github.com
- License
- The repository says the project follows the Mozilla Public License 2.0 and allows proprietary use if modifications to MPL-licensed files remain open.Read 30 Sep 2026 · github.com
- Browser hardening
- It disables developer tools, view source, downloads, right-click, console access and drag-and-drop.Read 30 Sep 2026 · github.com
- Browser restrictions
- Browser hardening disables DevTools, View Source, downloads, right-click, console and drag-and-drop.Read 30 Sep 2026 · github.com
- Contribution support
- The maker welcomes contributions and asks contributors to open an issue before making changes.Read 30 Sep 2026 · github.com
- Current limitation
- The repository states that OpenLock is not exam-ready because its SEB key derivation is not yet byte-exact and the LMS handshake fails.Read 30 Sep 2026 · github.com
- Data handling
- The security model specifies an off-the-record browser profile with no persistent storage and permissions denied by default.Read 30 Sep 2026 · github.com
- Distribution packaging
- AppImage, .deb, .rpm and Flatpak packaging are listed as planned rather than available releases.Read 30 Sep 2026 · github.com
- Exam status
- The project says it is not exam-ready because its SEB key derivation is not byte-exact and has not been validated against a live LMS.Read 30 Sep 2026 · github.com
- Input lockdown
- It blocks escape shortcuts including Alt+Tab, Alt+F4, Ctrl+C and PrintScreen and restricts clipboard use.Read 30 Sep 2026 · github.com
- Input restrictions
- Input lockdown blocks shortcuts including Alt+Tab, Alt+F4, Ctrl+C and PrintScreen, as well as clipboard use.Read 30 Sep 2026 · github.com
- Integrity checks
- The project lists VM, debugger and hypervisor detection, plus optional self-hash verification, as security measures.Read 30 Sep 2026 · github.com
- Kiosk mode
- Its kiosk mode uses fullscreen takeover via X11 override-redirect or a Wayland/Cage compositor.Read 30 Sep 2026 · github.com
- Linux requirements
- The stated prerequisites include Ubuntu 22.04 or later, Fedora 38 or later, or Arch Linux, along with Qt6 and QtWebEngine.Read 30 Sep 2026 · github.com
- LMS integrations
- The project lists adapters for Moodle, Canvas and Blackboard, but says it has not been tested against live instances of those LMS platforms.Read 30 Sep 2026 · github.com
- Native Linux app
- It is built natively for Linux rather than through a compatibility layer.Read 30 Sep 2026 · github.com
- Navigation controls
- OpenLock supports URL whitelist and blacklist filtering and navigation policy enforcement.Read 30 Sep 2026 · github.com
- Process guard
- It monitors and kills prohibited processes such as screen recorders, virtual machines and remote-desktop tools.Read 30 Sep 2026 · github.com
- Process protection
- A process guard monitors and kills prohibited processes such as screen recorders, virtual machines and remote desktop software.Read 30 Sep 2026 · github.com
- SEB protocol
- It parses .seb configuration files and attaches Browser Exam Key and Config Key headers to requests, but the project says these keys currently will not match an LMS handshake.Read 30 Sep 2026 · github.com
- Security model
- Its security model uses cgroups v2 process isolation, input capture, an off-the-record browser profile, denied permissions and URL filtering.Read 30 Sep 2026 · github.com
- Supported distributions
- The documented prerequisites include Ubuntu 22.04 or newer, Fedora 38 or newer and Arch Linux.Read 30 Sep 2026 · github.com
- Validation status
- The project has not been validated against a live Moodle, Canvas or Blackboard instance.Read 30 Sep 2026 · github.com
Strong points and limits
Strong points
- Free MPL 2.0 project
- Native Linux application
- Blocks app switching and clipboard use
- Process guard targets prohibited software
- Supports URL whitelist and blacklist policies
Limits
- Project states it is not exam-ready
- LMS handshake keys currently do not match
- Live Moodle, Canvas, and Blackboard validation absent
- AppImage, deb, rpm, and Flatpak packages planned
Who it suits
OpenLock suits Linux contributors or administrators evaluating an open-source exam-lockdown project before production validation.
Verdict
OpenLock documents extensive Linux lockdown and isolation controls, but its own status excludes exam-ready use. Treat it as a project requiring protocol fixes and live LMS validation.
Where Specifiction places it
- Lockdown Browser Software#19 of 227.2