autostart spec, round 2!

[Vincent Untz]

Le lundi 23 octobre 2006, à 14:36, Dan Winship a écrit :
> On Mon, 2006-10-23 at 19:33 +0200, Thiago Macieira wrote:
> > Especially since environment variables aren't locked down. You can easily 
> > change $XDG_CONFIG_DIRS. Setting it or adding [$i] to some files isn't 
> > equal to system lockdown.
> 
> Yeah, I realized that when I read Vincent's message too. I'm starting to
> wonder if there are actually cases where freedesktop-autostart lockdown
> would be useful. (It seems like in order to make it not trivially
> hack-around-able, you have to lock down enough other things that there's
> no need to lock down autostart too, because there wouldn't be any way to
> modify startup at that point anyway.)

In the case of autostart, this is less an issue than in other cases
since there are not a lot of ways for the user to modify the environment
variable before the session manager runs.

Vincent

-- 
Les gens heureux ne sont pas pressés.