[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: allowing X display from su'd environment



On Sat, Nov 09, 2002 at 05:00:23PM +0100, Michael Eyrich wrote:

> On Sat, Nov 09, 2002 at 10:41:05AM -0500, Matt Zimmerman wrote:
> | An easier wethod:
> | 
> | $ su
> | # export XAUTHORITY=~user/.Xauthority
> 
> This won't work, if ~user is NFS-mounted with the
> 'root_squash'-option, because 'nobody' won't be allowed to read ~users
> .Xauthority. 

It also won't work if SE Linux or RSBAC access controls forbid root from
reading this file, or if the user's X authority tokens are not in
~/.Xauthority, or any number of other reasons.  The point was that it is
simple.  Anyone running a largish multiuser system with NFS-mounted home
directories already understands these issues.  Others are asking questions.

-- 
 - mdz



Reply to: