[FreeNX-kNX] Fwd: Re: FreeNX 0.4.4-RC1

Sunil funtoos at yahoo.com
Wed Aug 3 05:39:37 UTC 2005


somehow reply-to changed...

--- Sunil <funtoos at yahoo.com> wrote:

> Date: Tue, 2 Aug 2005 22:38:20 -0700 (PDT)
> From: Sunil <funtoos at yahoo.com>
> Subject: Re: [FreeNX-kNX] FreeNX 0.4.4-RC1
> To: Bruno.S.Delbono at mail.ac
> 
> what so bad about that? it is still a user's shell,
> and he has already been authenticated.
> 
> --- Bruno Delbono <Bruno.S.Delbono at mail.ac> wrote:
> 
> > Sunil wrote:
> > 
> > > of course we can modify nxloadconfig with a
> uname
> > > switch for solaris, but I think thats ugly. bash
> > -l is
> > > clean a solution if it doesn't have any other
> > issues
> > > (I can't think of any actually, security
> maybe?).
> > 
> > So you want to have nxnode to include #!/bin/bash
> -l
> > ? If so, I don't 
> > like it personally. And you are right, its because
> > of security problems.
> > 
> >  From info bash:
> > 
> >       When bash is invoked as an interactive login
> > shell, or as  a
> >       non-interactive  shell  with  the  --login 
> > option, it first
> >       reads and executes commands from the file 
> > /etc/profile,  if
> >       that  file  exists.   After  reading that
> > file, it looks for
> >       ~/.bash_profile,  ~/.bash_login,  and 
> > ~/.profile,  in  that
> >       order,  and  reads  and executes commands
> from
> > the first one
> >       that exists and is readable.  The
> --noprofile
> > option may  be
> >       used when the shell is started to inhibit
> this
> > behavior.
> > 
> > IMHO, this is too risky. Not to mention, Solaris
> > also has it's own 
> > binaries such as ls vs. gls, gmd5sum etc.
> > 
> > My two cents.
> > 
> > -Bruno
> > 
> 
> 
> 
> 		
> __________________________________ 
> Yahoo! Mail 
> Stay connected, organized, and protected. Take the
> tour: 
> http://tour.mail.yahoo.com/mailtour.html 
> 
> 



		
____________________________________________________
Start your day with Yahoo! - make it your home page 
http://www.yahoo.com/r/hs 
 



More information about the FreeNX-kNX mailing list