From: Alexei_Roudnev (Alexei_Roudnev_at_exigengroup.com)
Date: Fri Mar 23 2007 - 18:15:06 CET
Message-ID: <0e6101c76d6e$cd65a7d0$6401a8c0@alexh> From: "Alexei_Roudnev" <Alexei_Roudnev@exigengroup.com> Date: Fri, 23 Mar 2007 10:15:06 -0700 Subject: Re: [suse-sles-e] SLES10 sux (== /bin/su) - broken??
Marcus, I read it on the first day of 'SLES10'. This document is not enough,
because it does not mention system users limitation and incompatibility with
the old sux.
Or, may be, orarun rpm was corected and when installed, allows su to oracle
with X11 ?
The same with iSCSI - it mention in one place _hotplug' but have nothing,
explaining ho wit works and how it can be integrated with the opther
components.
Both changes aare not compatible and both are not documented 'text below !=
document, it is just saying 'and now we use another tool' without describing
differences. man su have not anything about x11 forwarding, too.
Try
man su
man pam_xauth
and show me, where it is described?
Both changes are not nesessary at all (at least removing sux and removing
netfs).
From: "Marcus Meissner" <meissner@suse.de>
To: "Alexei_Roudnev" <Alexei_Roudnev@exigengroup.com>
Cc: "Anders Norrbring" <lists@norrbring.se>; <suse-sles-e@suse.com>
Sent: Friday, March 23, 2007 3:19 AM
Subject: Re: [suse-sles-e] SLES10 sux (== /bin/su) - broken??
> On Thu, Mar 22, 2007 at 11:35:11AM -0700, Alexei_Roudnev wrote:
> > 1) sux change is not documented in SUSe (about systemuser=1 option).
Guess
> > what 99% users will do - they will run
> >
> > xhost + (on their desk)
> > export DISPLAY=...
>
> > so no security at all. Excellent change and no documentation (except in
> > Google -:)).
>
> Wrong.
>
>
/usr/share/doc/release-notes/SUSE_Linux_Enterprise_Server_10/RELEASE-NOTES.e
n.html:
>
> <h3>Forwarding xauth keys between users with <tt>sux</tt></h3>
> <p>The shell script <tt>sux</tt> was removed. The functionality
> of forwarding xauth keys between users is now handled by the
> <tt>pam_xauth</tt> module and <tt>su</tt>.</p>
>
> Ciao, Marcus
>
---------------------------------------------------------------------
To unsubscribe, e-mail: suse-sles-e-unsubscribe@suse.com
For additional commands, e-mail: suse-sles-e-help@suse.com
This archive was generated by hypermail 2.1.7 : Fri Mar 23 2007 - 20:19:04 CET