home *** CD-ROM | disk | FTP | other *** search
- Newsgroups: comp.unix.ultrix
- Path: sparky!uunet!decwrl!deccrl!news.crl.dec.com!news!hrt
- From: hrt@utne.aosg.gsf.dec.com (Henry R. Tumblin AOSG)
- Subject: Re: Service Accounts running X login
- Message-ID: <1992Aug26.124449.3475@aosg.gsf.dec.com>
- Sender: usenet@aosg.gsf.dec.com (USENET News System)
- Nntp-Posting-Host: utne.aosg.gsf.dec.com
- Reply-To: hrt@aosg.gsf.dec.com
- Organization: AOSG
- References: <1992Aug25.152709.23868@rz.uni-karlsruhe.de>
- Date: Wed, 26 Aug 1992 12:44:49 GMT
- Lines: 36
-
- > On all our machines there's a passwordless service account allowing
- > every user to shutdown the machine from the console.
-
- > When we got an Ultrix machine I installed such an account.
- > The problem: with an X window login on the console people can
- > login into this account without any restrictions.
-
- > Are there any possibilities to control the actions of some special accounts
- > after the X window login ?
-
- You can modify the .profile or .cshrc to be a "captive" account so that all
- that you can do is perform a shutdown or exit. Part of the problem with
- Ultrix is that it doesn't use the MIT style of startup, which invoke xdm which
- uses scripts to control the environment. What you can do to work around this
- is to specify a script instead of the session manager in the /etc/ttys file.
- Look at the man page for dxsession and it'll show you how to specify this. Then
- what you can do in the script is to detect the special account and do the
- right thing, otherwise you exec dxsession and everything works as normal.
-
- > Btw, is it possible for an user logged into the console in character mode
- > to start an X window enviroment ? Someting like startx ?
-
- Sure by having them start xdm which should do the right thing. You may need
- to set the sticky bit on xdm if you want non-priviledged users to start xdm
- since it normally gets started by root. You may have to fiddle with this.
-
- The good news is that we've gone to the MIT style of startup in OSF/1-Alpha and
- this type of customization becomes much easier to do.
-
- /Henry
-
- --
- Henry R. Tumblin Alpha Open Systems Group
-
-
-
-