Heads up for login managers

[Nicolas Mailhot]

Le lundi 12 février 2007 à 14:42 -0500, Steve Grubb a écrit :
> On Monday 12 February 2007 14:22, David Zeuthen wrote:
> > On Mon, 2007-02-12 at 14:10 -0500, Steve Grubb wrote:
> > > "It allows users to switch between user accounts on a single PC without
> > > quitting applications and logging out."
> > >
> > > So it seems to indicate that UID is the right granularity.
> >
> > No. Again, it's a (mild?) security problem if an inactive session can
> > spy on another session using sound or webcam capture. Just think of
> > bored grad students in a computer lab.
> 
> Inactive sessions should have no access to hardware

Nope.
Think system with PVR card & video output on TV/videoprojector/whatever
You will want a continuously running background session managing the
video bits (recording stuff, outputing video, reacting to lirc remote
commands) with normal computer user sessions running in parallel on the
computer screen head

-- 
Nicolas Mailhot
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: Ceci est une partie de message num?riquement sign?e
URL: <http://listman.redhat.com/archives/fedora-maintainers/attachments/20070225/17139424/attachment.sig>