HP Workstation zx2000 HP Graphics Administration Guide for HP-UX 11.X (IPF ver - Page 39

security example, property _MOTIF_DRAG_ATOM_PAIRS

Page 39 highlights

configuring an X Server on HP-UX security example version-1 # Allow reading of application resources, but not writing. property RESOURCE_MANAGER property SCREEN_RESOURCES root ar iw root ar iw # Ignore attempts to use cut buffers. Giving errors causes # apps to crash, and allowing access may give away too much # information. property CUT_BUFFER0 property CUT_BUFFER1 property CUT_BUFFER2 property CUT_BUFFER3 property CUT_BUFFER4 property CUT_BUFFER5 property CUT_BUFFER6 property CUT_BUFFER7 root irw root irw root irw root irw root irw root irw root irw root irw # Use these if you are using Motif. property _MOTIF_DEFAULT_BINDINGS property _MOTIF_DRAG_WINDOW property _MOTIF_DRAG_TARGETS property _MOTIF_DRAG_ATOMS property _MOTIF_DRAG_ATOM_PAIRS root root any any any ar iw ar iw ar iw ar iw ar iw # The next two rules let xwininfo -tree work when untrusted. property WM_NAME any ar # Allow read of WM_CLASS, but only for windows with WM_NAME. # This might be more restrictive than necessary, but # demonstrates the facility, and is also # an attempt to say "top level windows only." property WM_CLASS WM_NAME ar # These next three let xlsclients work untrusted.Think # carefully before including these; giving away the client # machine name and command may be exposing too much. property WM_STATEWM_NAMEar property WM_CLIENT_MACHINE property WM_COMMAND WM_NAME ar WM_NAME ar # To let untrusted clients use the standard colormaps created # by xstdcmap, include these lines. property RGB_DEFAULT_MAP root ar property RGB_BEST_MAP root ar property RGB_RED_MAP root ar property RGB_GREEN_MAP root ar Graphics Administration Guide 4-27

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66

Graphics Administration Guide
4–27
configuring an X Server on HP-UX
security example
version-1
# Allow reading of application resources, but not writing.
property RESOURCE_MANAGER
root
ar iw
property SCREEN_RESOURCES
root
ar iw
# Ignore attempts to use cut buffers. Giving errors causes
# apps to crash, and allowing access may give away too much
# information.
property CUT_BUFFER0
root
irw
property CUT_BUFFER1
root
irw
property CUT_BUFFER2
root
irw
property CUT_BUFFER3
root
irw
property CUT_BUFFER4
root
irw
property CUT_BUFFER5
root
irw
property CUT_BUFFER6
root
irw
property CUT_BUFFER7
root
irw
# Use these if you are using Motif.
property _MOTIF_DEFAULT_BINDINGS
root
ar iw
property _MOTIF_DRAG_WINDOW
root
ar iw
property _MOTIF_DRAG_TARGETS
any
ar iw
property _MOTIF_DRAG_ATOMS
any
ar iw
property _MOTIF_DRAG_ATOM_PAIRS
any
ar iw
# The next two rules let xwininfo -tree work when untrusted.
property WM_NAME
any
ar
# Allow read of WM_CLASS, but only for windows with WM_NAME.
# This might be more restrictive than necessary, but
# demonstrates the <required property> facility, and is also
# an attempt to say “top level windows only.”
property WM_CLASS
WM_NAME
ar
# These next three let xlsclients work untrusted.Think
# carefully before including these; giving away the client
# machine name and command may be exposing too much.
property WM_STATEWM_NAMEar
property WM_CLIENT_MACHINE
WM_NAME
ar
property WM_COMMAND
WM_NAME
ar
# To let untrusted clients use the standard colormaps created
# by xstdcmap, include these lines.
property RGB_DEFAULT_MAP
root
ar
property RGB_BEST_MAP
root
ar
property RGB_RED_MAP
root
ar
property RGB_GREEN_MAP
root
ar