On Mon, Feb 12, 2007 at 02:18:41PM -0500, David Zeuthen wrote: > The checks against XDG_SESSION_COOKIE is only used to limit access, They are not limiting access. The "session cookie" is free for anything with the same uid to access and use. Its nerf security. Alan