2 ms·
Here is one advantage of X that was notable, even today: Keeping user data out of user hands. A high end CAD application I used to do sales, service, sysadmin
by ddingus 7y ago
Here is one advantage of X that was notable, even today:
Keeping user data out of user hands.
A high end CAD application I used to do sales, service, sysadmin for used X and the SUID permission bit in UNIX to accomplish keeping data out of users hands.
On my bigger systems, I would run one application image, shared by a lot of users. This app, when run by a user, had the data permission and "ran as" data admin. The user has no permission.
All access to the data was through the app. And the users had no access to the app or data, just a remote X session.
I had tens of users interacting on big designs that way. No worries.
Secondly, I could where needed, spawn a second copy of the app to run local to be served up to or even just ran directly by needy users and everything still worked fine. I just had the app run as a different user and the access barrier remained intact.
But the big win was one application, one data repository, many users via X. I made a scripted login for them. They would launch it, do their thing, and that's it.
All I needed was a respectable X server for whatever box they ran locally.
I could admin that setup, and did, on a free JUNO dialup from all over the country.
This was the 90's through early 00's.
- tinus_hn 7y agoThis kind of security is more like a suggestion. It only works without an adversary. X and the libraries used on it are not suitable for setuid programs.
- ddingus 7y agoContext matters. The notable part today isn't hacker protection. I'm sorry I implied that. It's user error / protection. And at the time, getting that on anything that required data move around? Horrors! We've got that today, though it took an amazing amount of thrashing about to get where I was then. And it's more secure in the adversarial sense too. Still, a lot of data has to move around, and it's still a PITA when it does. The better tools today are rapidly converging on that same basic model: App serve to users through display only protocols.