Path: utzoo!mnetor!tmsoft!torsqnt!news-server.csri.toronto.edu!bonnie.concordia.ca!thunder.mcrcim.mcgill.edu!snorkelwacker.mit.edu!spool.mu.edu!sdd.hp.com!samsung!zaphod.mps.ohio-state.edu!rpi!batcomputer!munnari.oz.au!yoyo.aarnet.edu.au!sirius.ucs.adelaide.edu.au!arutherf From: arutherf@ucs.adelaide.edu.au (Andrew Rutherford) Newsgroups: comp.windows.open-look Subject: Re: Has anyone had luck with Sun's Xnews & xdm? Message-ID: <2498@sirius.ucs.adelaide.edu.au> Date: 25 Feb 91 22:07:31 GMT References: <1991Jan28.143944.4074@sunrise.com> <91056.101249ONM29@DMSWWU1A.BITNET> Organization: Information Technology Division, The University of Adelaide, AUSTRALIA Lines: 20 In article <91056.101249ONM29@DMSWWU1A.BITNET> ONM29@DMSWWU1A.BITNET (Frank Wuebbeling) writes: >For some time, we used Sun's Xnews and xdm on a SUN 3. However, we were Same here ... a 3/50 w 4Megs (touch slow :-) [ ... some stuff deleted ... ] >started Xnews. So, with xdm, all postscript-processes are in fact run by >xdm, who in turn has root privileges. > >So, all user-postscript-processes were actually run by root which was >unacceptable, as postscript has the ability to read and write files. [ ... rest deleted ] Simple! In your Xservers entry, change the name of the server to a shell script, which calls su $OPENWINHOME/bin/xnews $* This was the way I did it. The only thing you have to be careful of is that the fake user has permission to read/write the Xauthority file. -- Andrew Rutherford arutherf@sirius.ucs.adelaide.edu.au +61 8 228 4782 Real Programmers always confuse Christmas and Room 1069, Adelaide Uni Halloween because OCT 31 == DEC 25 !