On Wed, May 24, 2000 Rainer Brall wrote:
ich benutze unter KDE den xscreensaver. Das funktioniert für einen normalen User auch prima. Xscreensaver wird ueber die .xinitrc des Users gestartet und holt sich die Konfiguration aus der Configdatei .xscreensaver des Users. Wenn ich mich als root in KDE einlogge wird xscreensaver immer für nobody ge- startet. Kann mir jemand erklaeren, warum das so ist ?
auszug aus setuid.c von xscreensaver: <snip> [...] /* If we're running as root, switch to a safer user. This is above and beyond the fact that we've disabling locking, above -- the theory is that running graphics demos as root is just always a stupid thing to do, since they have probably never been security reviewed and are more likely to be buggy than just about any other kind of program. (And that assumes non-malicious code. There are also attacks here.) *** WARNING: DO NOT DISABLE THIS CODE! If you do so, you will open a security hole. See the sections of the xscreensaver manual titled "LOCKING AND ROOT LOGINS", and "USING XDM". */ [...] </snip> -moritz -- Moritz Schulte - hp9001.fh-bielefeld.de/~moritz/, PGP Key available| ---- Zufallssignatur #25: -----------------------------------------| % \(- | bash: (-: command not found | --------------------------------------------------------------------- To unsubscribe, e-mail: suse-linux-unsubscribe@suse.com For additional commands, e-mail: suse-linux-help@suse.com