[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-core-devel
Subject:    Re: Elektra backend for KDE
From:       Waldo Bastian <bastian () kde ! org>
Date:       2006-02-25 0:32:37
Message-ID: 200602241632.42868.bastian () kde ! org
[Download RAW message or body]


On Tuesday 21 February 2006 12:11, Aaron J. Seigo wrote:
> On Tuesday 21 February 2006 10:59, Zack Rusin wrote:
> > I think we had a discussion before about relaying on environment
> > variables too much in the past ;)
>
> yes, for situations where third parties need to extend them at application
> installation time (e.g. XDG_*_DIRS). this is a different situation.
>
> > Do we consider the following scenario a problem: Kiosk settings are
> > being propagated from the backend specified in the environment
> > variable, user sets the variable to something that doesn't exists
> > (non-existing ldap backend, non-existing directory, whatever) and gets
> > control over the full installation. Is that an issue?
>
> once they are set for the X session, they can't adjust them. they could get
> to a terminal and change them for applications run from that command line,
> but one can also block access to the command line. it's pretty safe in that
> regard.
>
> a global config file for this would be even more safe, and i did consider
> it, but that would result in more hits to disk (== slower), something i'm
> hoping to avoid as much as possible here.

Currently /etc/kderc is read and contains additional paths and KIOSK info. It 
wouldn't be a stretch to include this information there as well.

Cheers,
Waldo
-- 
Linux Client Architect - Channel Platform Solutions Group - Intel Corporation

[Attachment #3 (application/pgp-signature)]

[prev in list] [next in list] [prev in thread] [next in thread]