[ubuntu-uk] Ubuntu (linux) vulnerabilty?? Comment please

[Matthew Macdonald-Wallace]

Quoting Robert McWilliam <rmcw at allmail.net>:

> On Wed, 20 Jun 2007 12:48:58 +0100
> alan c <aeclist at candt.waitrose.com> wrote:
>> Would there be a procedure to use browser/s with a different 'user'
>> password, with much lower privileges than the normal user, so that
>> when browsing the 'user-low' being used is not allowed to download
>> anything knowingly or not (without password)? Accepted that the the
>> user-low is still using a browser which may have weaknesses.
>>
>
> Yes. I just found this procedure by playing around so there may be a
> better one.
>
> First you need to have another user to run firefox as, and you need to
> tell the xserver that local users can connect to it (not just the user
> who owns it) with:
> 	xhost +local:

In theory, you shouldn't need to do even this, the gksudo command  
should work without needing to open up X to local connections.

M.
-- 
Matthew Macdonald-Wallace
Group Co-Ordinator
Thanet Linux User Group
http://www.thanet.lug.org.uk/
matthew at truthisfreedom.org.uk
GPG KEY: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xFEA1BC16