aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--doc/security.txt2
1 files changed, 2 insertions, 0 deletions
diff --git a/doc/security.txt b/doc/security.txt
index be5ab30..aa4ea2e 100644
--- a/doc/security.txt
+++ b/doc/security.txt
@@ -111,6 +111,7 @@ in /etc/hosts.allow).
- network commands (ssh, scp, rsh, ...) restricted to the members of the ntools group.
- compilation commands (gcc, g++, ...) restricted to the members of the ctools group.
- rpm command restricted to the members of the rpm group.
+- forbid exporting X display when switching from root to another user
*******************************
Security level 5 ( Aka Paranoid system ) :
@@ -161,6 +162,7 @@ in /etc/hosts.allow).
- network commands (ssh, scp, rsh, ...) restricted to the members of the ntools group.
- compilation commands (gcc, g++, ...) restricted to the members of the ctools group.
- rpm command restricted to the members of the rpm group.
+- forbid exporting X display when switching from root to another user
******************