On Thu, Jul 11, 2013 at 11:48 PM, Cameron Simpson <[email protected]> wrote: > > > > On 11Jul2013 20:54, C. Beck <[email protected]> wrote: > | On Jul 11, 2013 4:11 PM, "Cameron Simpson" <[email protected]> wrote: > > | There is a way also to assume the active .Xauthority file from a > | different login shell for a priveledged user (or something like that). And > | that is probably the way it should be done. > > Yes. I have a script somewhere to read xauth credentials from one > file for insertion into the current user's xauth file.
I think you only need to point at the .Xauthority file and have read access to make it work. Note that ".Xauthority" is a file that the active X-server uses, whereas "xauth" is a separate program that can be used to manipulate/edit .Xauthority. > Not hard at > all, but the script needs to have access, when means being root or > the other user. > No, you may need elevated privilege to set up graphical access, but not to actually start a windowed program as a different user. That is unnecessary. Ok, I have now "googled" to refresh my memory. The following article by Ian Shields offers a fairly detailed explanation of several options. <http://www.ibm.com/developerworks/library/l-basics/section6.html> xhost is very simple (item 9 in the article), but will require the user to research and evaluate whether they are concerned with the security of that or any option that is chosen. For anyone interested: My search string to find the above in Google was as follows: "linux use X window as different user" The above article was the second result, while a stackoverflow post with related discussion was the first. >| At least since Ubuntu 10.04, there has been a "switch user" from the >| login/out options. It suspends the session of the active user, and lets a >| different user log into their own desktop environment, I think in a >| different tty. > > That sounds like what Sophie wants. Two desktops, one as user1 and > one as user2. Nice and separate. Sharing one desktop with apps of > multiple users is a potential security issue. Logging in and out all of the time and navigating away from the active work flow to view a single program in X would be a pain, especially when it is designed to handle more than one user at a time. But that is just my opinion. More complete manuals with better description: Xauth <http://www.x.org/releases/X11R7.7/doc/man/man1/xauth.1.xhtml> Xhost <http://www.x.org/releases/X11R7.7/doc/man/man1/xhost.1.xhtml> Xsecurity offers some explanation of the content of .Xauthority: <http://www.x.org/releases/X11R7.7/doc/man/man7/Xsecurity.7.xhtml> ------------------------------------ To unsubscribe from this list, please email [email protected] & you will be removed.Yahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/LINUX_Newbies/ <*> Your email settings: Individual Email | Traditional <*> To change settings online go to: http://groups.yahoo.com/group/LINUX_Newbies/join (Yahoo! ID required) <*> To change settings via email: [email protected] [email protected] <*> To unsubscribe from this group, send an email to: [email protected] <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
