also sprach Adam Warner <lists@consulting.net.nz> [2002.01.21.2307 +0100]: > Federico, are you saying that if you su - to a user account (from root) > and then start X that you are running X as root? If so that is a major > problem. no, he actually says that with exec, you should theoretically be more secure as in a root-su-user scenario, because after you exec, the root shell is gone. it's an interesting proposal and when i have time, i would like to look at the user status after su vs. a normal login to see if there's *any* difference. -- martin; (greetings from the heart of the sun.) \____ echo mailto: !#^."<*>"|tr "<*> mailto:"; net@madduck i'd rather be riding a high speed tractor with a beer on my lap, and a six pack of girls next to me.
Attachment:
pgpuupA8efTjW.pgp
Description: PGP signature