Firefox attaches session information to the active X display. If user A starts FF then user B uses the same desktop as user A to start an SSH instance of FF as user A the session data is from user B, not A.
I found this problem when I tried FF3 for the first time. I extraced FF into /root using an SSH [EMAIL PROTECTED] login then I started FF3 from /root/firefox-3???. I kept it running then forgot about it. Later I clicked my FF icon on my desktop that normally starts FF2 but this time it didn't. It brought up FF3 as the untrusted user and none of my FF2 pluges would work, my bookmarks were buggered and I had to shutdown FF3 for both users. Now when I run FF2 there are goofy things that happen to my plugings. I am conserned that this could be a security hole in FF. The untrusted user had no access to /root but because FF3 that was running from /root the untrusted user was able to invoke the binary programs as they existed in memory. Running SELinux would most likly prevent this problem but I think it is an issue. On Fri, Oct 24, 2008 at 8:59 AM, <[EMAIL PROTECTED]> wrote: > Can't you just set her up with her own user account and.... > > 1) ssh -X [EMAIL PROTECTED] > 2) log out, and back in > 3) 'switch users' (I believe that modern distros can handle this) > 4) Multi-seat her (er...) > > Simon > > > It's not to keep the desktop away from her, it's just so our web > > sessions in Firefox don't collide. I was just tired of having to log > > back in to GMail every morning (oh no! I'm starting to sound like a > > Windows user, aren't I?) Another alternative would be to get her to > > use a second web browser, or figure out how to get her user to run > > firefox in the same X session. I just did the first thing that worked > > :-) > > > > -Mark C. > > > > _______________________________________________ > clug-talk mailing list > [email protected] > http://clug.ca/mailman/listinfo/clug-talk_clug.ca > Mailing List Guidelines (http://clug.ca/ml_guidelines.php) > **Please remove these lines when replying > -- http://www.Radados.org
_______________________________________________ clug-talk mailing list [email protected] http://clug.ca/mailman/listinfo/clug-talk_clug.ca Mailing List Guidelines (http://clug.ca/ml_guidelines.php) **Please remove these lines when replying
