Profiles - Double checking

[Andrew Tridgell]

> logon drive = H:
> include = %H/.user.conf
> 
> Then, in the user's home directory, in a file named .user.conf stored in
> the user's home directory, I have the line:
> 
> logon path = /path/to/users/home/directory/.profile
> 
> Is there anything inhrently wrong with this setup? 

yes!

a user can change that file to read:

[hack]
	path = /
	force user = root
	read only = no

and then they have root access to everything ...

don't use %H for config files :)