Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 3 Feb 2005 03:19:34 +0100
From:      Gert Cuykens <gert.cuykens@gmail.com>
To:        Chris Hodgins <chodgins@cis.strath.ac.uk>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: xhost +localhost
Message-ID:  <ef60af0905020218193eea1fc9@mail.gmail.com>
In-Reply-To: <420174BC.8090609@cis.strath.ac.uk>
References:  <ef60af09050202095829be3b6f@mail.gmail.com> <20050202210526.GC77499@keyslapper.net> <42014E0A.5070003@mac.com> <20050202221851.GE77499@keyslapper.net> <ef60af09050202143655b26622@mail.gmail.com> <20050202224322.GF77499@keyslapper.net> <ef60af0905020215055e07b83e@mail.gmail.com> <20050202234814.GA24792@keyslapper.net> <ef60af0905020216106024d750@mail.gmail.com> <420174BC.8090609@cis.strath.ac.uk>

next in thread | previous in thread | raw e-mail | index | archive | help
> Don't want to be rude but do you have a specific reason for running
> xscreensaver as root?
> 
> Chris

Well the reason is very simple actuale lets pretend we have a user
gert. User gert has alot of pictures and music stuff phone numbers
user gert dont want does things to be gone. Somebody hacks user gert
because user gert uses a screensaver. And the hacker deletes all
files. User gert is not happy because he lost everything. Do you think
user gert gives a chit that the system was untouched because the
hacker did not had root permission ?

For me its wrong to think user accounts are not importend because they
do for the average window xp single user. They dont care about viruses
infection on there system reinstalling everything they care about
there files.  So if sreensaver is a securty risc as root i doesnt mean
its not a security risck for a user account. The only differens
between a root and user should be that users can not read or mess with
other users files. The security sould be EXACTLY the same. So if root
can not run a screensaver then the users can also not run a
screensaver.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?ef60af0905020218193eea1fc9>