[FreeNX-kNX] Fwd: Re: FreeNX 0.4.4-RC1
Sunil
funtoos at yahoo.com
Wed Aug 3 05:39:37 UTC 2005
somehow reply-to changed...
--- Sunil <funtoos at yahoo.com> wrote:
> Date: Tue, 2 Aug 2005 22:38:20 -0700 (PDT)
> From: Sunil <funtoos at yahoo.com>
> Subject: Re: [FreeNX-kNX] FreeNX 0.4.4-RC1
> To: Bruno.S.Delbono at mail.ac
>
> what so bad about that? it is still a user's shell,
> and he has already been authenticated.
>
> --- Bruno Delbono <Bruno.S.Delbono at mail.ac> wrote:
>
> > Sunil wrote:
> >
> > > of course we can modify nxloadconfig with a
> uname
> > > switch for solaris, but I think thats ugly. bash
> > -l is
> > > clean a solution if it doesn't have any other
> > issues
> > > (I can't think of any actually, security
> maybe?).
> >
> > So you want to have nxnode to include #!/bin/bash
> -l
> > ? If so, I don't
> > like it personally. And you are right, its because
> > of security problems.
> >
> > From info bash:
> >
> > When bash is invoked as an interactive login
> > shell, or as a
> > non-interactive shell with the --login
> > option, it first
> > reads and executes commands from the file
> > /etc/profile, if
> > that file exists. After reading that
> > file, it looks for
> > ~/.bash_profile, ~/.bash_login, and
> > ~/.profile, in that
> > order, and reads and executes commands
> from
> > the first one
> > that exists and is readable. The
> --noprofile
> > option may be
> > used when the shell is started to inhibit
> this
> > behavior.
> >
> > IMHO, this is too risky. Not to mention, Solaris
> > also has it's own
> > binaries such as ls vs. gls, gmd5sum etc.
> >
> > My two cents.
> >
> > -Bruno
> >
>
>
>
>
> __________________________________
> Yahoo! Mail
> Stay connected, organized, and protected. Take the
> tour:
> http://tour.mail.yahoo.com/mailtour.html
>
>
____________________________________________________
Start your day with Yahoo! - make it your home page
http://www.yahoo.com/r/hs
More information about the FreeNX-kNX
mailing list