[sudo-users] Sudo and x11 with root-squash NFS home dirs

[Patrick Spinler]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


I suspect my answer is that I'm S.O.L., but I'd like to ask nevertheless:

We run NFS home directories on our servers, with root-squash set on the
NFS server.

That means that e.g. the .Xauthority file in my $HOME looks (correctly)
like this:

- -rw------- 1 ap00375 ap00375 3938 Nov 24 10:35 .Xauthority

My use case is to ssh -X some-server, then run "sudo some-X11-command".
 However, with root-squash on the NFS server, when I do a "sudo
some-X11-command", the command running with EUID 0 tries to read my
.XAuthority.  Of course it's denied and some-X11-command can't access my
ssh forwarded localhost:10 $DISPLAY.

As I mentioned I think I'm pretty much out of luck here, but just to be
sure, does anyone have any ideas on how to combine ssh X11 forwarding,
sudo X11-commands, and root-squashed NFS home dirs?

Thanks!
- -- Pat


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFJKt7VNObCqA8uBswRAlTNAJ9NBFy3/bb9IT4QgMLEDMZERqG8awCdFoT/
R9gedhiWNjk0UCRiDXQssTA=
=kHfl
-----END PGP SIGNATURE-----