On Sat, 23 May 2015 05:12:58 -0400
"ertetlen barmok" wrote:
> There is no solution for locking an OpenBSD Desktop while using FVWM2
> and "nosuid" mount option enabled for all mountpoints in /etc/fstab?
xlock is setgid auth, so you could add your user to the auth group.
Whether or not this is a good idea is another matter, and it's likely
to be a worse one than allowing binaries to run setuid.
There are going to be many other things broken on a system with nosuid
used for all mounts. Why do you want / and /usr to be mounted nosuid?
You're already implicitly trusting the OpenBSD codebase by running
OpenBSD, so what's wrong with trusting OpenBSD's setuid executables?