[FreeNX-kNX] Seamless / rootless session, allowing only certain application to start.

[chris at ccburton.com]

freenx-knx-bounces at kde.org wrote on 23/01/2013 14:14:26:

> Ok, the ENABLE_ROOTLESS_MODE="1" is clear, thanks for the info. J
> 
> Basically I would appreciate any pointers on FreeNX versions in 
> which the nxacl is working and maybe how I can check if the nxacl is
> being processed.


nxacl is "processed" (by nxservee) if it exists and is executable.

        if [ -x "$PATH_BIN/nxacl" ] &&


> Maybe my version, even if it has nxacl but it does not seem to 
> process it. Do I need to enable it somewhere?


The FreeNX rpm will have supplied

                 nxacl.sample

with benign defaults, so you need to (root) copy this to nxacl
and
make sure it's executable.




> 
> Also some example of how I can modify the session parameters, syntax 
etc.
>



I advise setting up a user to test with,
then
add to nxacl (just before allowall at the bottom) something like :-


if [ $USER = "im-a-testing-user" ] ; then  # you may also  want to check 
$type isn't shadow or windows or vnc

        force_this_to_run="/path/to/your/application"

        rootless_param=$(getparam rootless)
        application_param=$(getparam application)

        [ -z "$rootless_param" ] && addparam rootless 1
        [     "$rootless_param" != "1" ] && changeparam rootless 1

        [ -z "$application_param" ] && addparam application 
"$force_this_to_run"
        [     "$application_param" != "$force_this_to_run" ] && 
changeparam application "$force_this_to_run"

        changeparam type unix-kde       # just make sure its not shadow 
etc
fi



 
> Thanks,
> 
> Tom

Let us know how you get on . . . .





-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kde.org/pipermail/freenx-knx/attachments/20130123/e6d778f3/attachment.html>