[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: The best recommendation for allowing "su" in X



On Sun, Jul 07, 2002 at 09:18:13PM +0200, Andreas Metzler wrote:
> Osamu Aoki <debian@aokiconsulting.com> wrote:
> >   What recommendation should I give to the reader for "su" in X?
> 
> > Here is the back ground.  FAQ is:
> 
> >  "I want to run X from a user account. It is a good thing. But how can
> >   I get a program which requires root privilege to run from this X
> >   session?"  
> 
> >  "export XAUTHORITY=$HOME/.Xauthority"
> [...]
> 
> This probably won't work if /home is on an NFS-mount, iirc sux works
> around this.
> http://fgouget.free.fr/sux/sux-readme.shtml

This is interesting.  Thread under:
 http://lists.debian.org/debian-devel/2001/debian-devel-200106/msg01001.html
discusses issues for these quite.

"sux" is an interesting short shell script but it is not packaged as a
debian package.  I will mention this but I wanted to recommend one
option to the user as "good enough" fix.  I will mention this if it is
packaged.

Creating symlink is a good aproach but only useful for one user account.

Maybe, I should have asked out of 5 approaches (or similar ones usung
XAUTHORITY), which one is the best for the common user?  This is for
running GUI program like "printtool".  Non-GUI can use simple su, sodo,
or super, as I know.

For clarity 5 choices for putting "export XAUTHORITY=$HOME/.Xauthority"
are in:

1) ~/.profile or .bash_profile: (not for gnome-session)
2) ~/.xinitrc : only works for startx. (I use this)
3) ~/.bashrc : ugly. (.bashrc is not for ENVIRONMENT VARIABLES)
4) ~/.xsession : kills Debian's nice configuration scheme. (Way to complicated)
5) /etc/X11/Xsession.d/10xfree86-common_su: Too complicated.  For all.

Which is best?

Regards,
Osamu
-- 
~\^o^/~~~ ~\^.^/~~~ ~\^*^/~~~ ~\^_^/~~~ ~\^+^/~~~ ~\^:^/~~~ ~\^v^/~~~ +++++
 Osamu Aoki @ Cupertino CA USA
 See "Debian reference": http://www.debian.org/doc/manuals/debian-reference/
 "Debian reference" Project at: http://qref.sf.net

 I welcome your constructive criticisms and corrections.


-- 
To UNSUBSCRIBE, email to debian-devel-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org



Reply to: