[FreeNX-kNX] connection to freeNX server with dsa keys ?

[Gian Filippo Pinzari]

Jon Severinsson wrote:
> Using FreeNX 0.3 or later you can set login through SU instead of
> through SSH in the node.conf file. Fist login of the nx user is still
> done with dsa, but the second login of the user is not done by ssh. It
> is still done through passwords, but ssh does not have to accept
> password authentification. You will have to add the nx user to the users
> (SuSE) or wheel (most other distors) group for su to work though.

When this mechanism is in use, how does FreeNX prevent that a user
that has taken over the nxserver would become any user in the system,
even users that are not NX users?

/Gian Filippo.