Clickthrough at start of session

[Glynn Clements]

Samuel Thibault wrote:

> > Is it possible to set up ?dm and/or X to display a click-thorugh 
> > screen login?                                                                       
> > On [accept] the user gets his session and on decline the session 
> > ends and back to the ?dm login prompt. 
> 
> See Xstartup:
> 
> # This script is run as root after the user logs in.  If this script exits with
> # a return code other than 0, the user's session will not be started.

Be very careful about what is run from this script. Although it runs
as root, USER, LOGNAME and HOME are set for the user logging in. If
you run a program which uses libraries which can be configured via
files beneath $HOME, the user may be able to run arbitrary commands as
root (and even if they can't run commands, they may be able to read or
write privileged files).

If you plan on running any non-trivial programs from the Xstartup
script, consider changing HOME and/or using "su" to run the program as
the user.

-- 
Glynn Clements <glynn at gclements.plus.com>