Chapter 10. File Access
10.3.3. Configuration
The configuration file /opt/thinlinc/etc/homecreatefilter.conf controls which files and
directories are allowed. By default, all files starting with a dot are allowed, as well as the files necessary
for KDE to start.
The configuration file is line based. A line not starting with a colon specifies a file object pattern that
should be allowed. A line starting with a colon specifies a command line pattern. Processes matching this
pattern will also be allowed write access, even if no file object pattern allows access.
10.3.4. Security Considerations and Limitations
The homecreatefilter feature is based on the LD_PRELOAD mechanism, which means it does not
support statically linked applications. Since environment variables can be modified by the user, the user
can disable the filter at will. homecreatefilter should not be regarded as a security mechanism, but rather
a mechanism that prevents the user from saving documents to the UNIX home directory by mistake.
In addition to the home directory, homecreatefilter restricts write access to the ~/Desktop directory.
123
Komentarze do niniejszej Instrukcji