Re: Rebooting the System

[Liam R E Quin <liam holoweb net>]

On Thu, 2006-04-13 at 15:59 +1000, Justin Clift wrote:
> Liam R E Quin wrote:
> <snip>
> > Root password should not be prompted for in a
> > gtk-engine-themed window, of course...
> <snip>
>
> Out of curiosity, why is this bad?

A gtk+ theme engine is a piece of executable code (usually in C)
that can live in the user's login directory, not root's.

So you could write a gtk+ theme that (for example) captures
keystrokes and saves them to a file.

Note that most Gtk+ themes don't work this way, and even
when they do, the theme engine is usually in a "trusted
directory", e.g. under /usr/share somewhere.

Investigate consolehelper, perhaps.

Liam

-- 
Liam Quin - XML Activity Lead, W3C, http://www.w3.org/People/Quin/
Pictures from old books: http://fromoldbooks.org/
Ankh: irc.sorcery.net irc.gnome.org www.advogato.org