Even without direct access to a terminal window it is possible for
well-informed users to launch any application for which they have
enough rights. All it takes is legitimate access through the menus to
an application than can *execute* any external program. I am sure
that *nedit* is but one example.

No! I am not paranoid! I just happen to have lots of well-informed
students who love to search for security holes. Lucky me, once
they've found one they soon loose interest in it.  ;-)



On 27-Jan-03 pedro noticioso wrote:
> My rudimantary solution is to install 2 or more
> instances of a light window manager like qvwm, each
> with its menus configured with the programs I want
> their asigned users to have
> 
> Of course, you still have the risk of having users
> just typing the name of their unauthorized programs,
> but if they have no terminal to launch from their
> manus, they will not be able to just type 'mozilla' or
> something 8)
> 
> --- Michel van Horssen
> <[EMAIL PROTECTED]> wrote:
>> Hi,
>> 
>> We're testing LTSP at the moment for (maybe) future
>> use. A potential client
>> would like to give it a try.
>> 
>> Had a basic setup working within 3 hours, 1 server 1
>> client.
>> 
>> Server is running RH 8.0
>> 
>> The question I have (i have more but will start with
>> one) is the following.
>> 
>> I would like to offer the client just some
>> applications and not all
>> installed.
>> 
>> Is there an easy way of restricting what someone
>> sees on the desktop (on a
>> per user or group basis)?
>> 
>> Please point me in the right direction. Have been
>> looking all day for
>> documentation on this subject but can't find it.
>> 
>> As said we're runing RH 8.0 with Gnome desktop.
>> 
>> Kind regards,
>> Michel
>> 
> 
> 
> __________________________________________________
> Do you Yahoo!?
> Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
> http://mailplus.yahoo.com
> 
> 
> -------------------------------------------------------
> This SF.NET email is sponsored by:
> SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2
> See!
> http://www.vasoftware.com
> ____________________________________________________________________
> _
> Ltsp-discuss mailing list.   To un-subscribe, or change prefs,
> goto:
>       https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
> For additional LTSP help,   try #ltsp channel on irc.freenode.net

--------------------------------------------
Wouter DeBacker ([EMAIL PROTECTED])
28-Jan-03    16:36:57    (SuSE Linux Xfmail)
--------------------------------------------


-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_____________________________________________________________________
Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help,   try #ltsp channel on irc.freenode.net

Reply via email to