Configuring Server Application Resources | 33 |
Any command executed through this mechanism will be run as that special user, although the SHELL environment variable is replaced with the first entry in the rshsecure.cfg file and the DISPLAY environment variable is set to point back to the terminal, allowing shell scripts that launch sets of X applications to work.
If the X manager specifies to run in this mode and provides an “actual user,” the xterm program (specified above) is executed, pointing back to the terminal, executing the su command (specified above). After the user successfully enters a password, the command passed via the X manager is then executed (SHELL and DISPLAY modified as above), with execution as this new user.
With the security and su capabilities described above, a .xinitrc file (or equivalent) can be executed, except that a window manager can not be launched (because the terminal is already running one). Every other application should run normally.
A prototype version of the rshsecure.cfg is provided on the CD and will be found in the same directory as the rshsecure program following installation.
