For what it's worth, the method of using startx leaves a small security
hole open, which is especially sucky with laptops. Even if the X session
is locked by something like xtrlock or xscreensaver, one can still
switch to the first terminal and use ^Z to background X, then being
allowed to run any program the logged in user can, and if carefully
done, without even the real user knowing.

At https://gbe.ring0.de/crap/display_managers I wrote up a bit of stuff
which allows not using any display manager while still being on the safe
side regarding running the X server as a user.

-- 

    Gregor Best

Attachment: pgpckjN3Bbycd.pgp
Description: PGP signature

Reply via email to