Your message dated Sat, 18 Jun 2016 09:22:05 +0000 with message-id <[email protected]> and subject line Re: release-notes: [stretch] Document X11 non-setuid change has caused the Debian Bug report #804280, regarding release-notes: [stretch] Document X11 non-setuid change to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 804280: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804280 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: release-notes Tags: stretch Hi, The following change should be documented for Stretch: """ xorg-server (2:1.17.3-1) unstable; urgency=medium The Xorg server is no longer setuid root by default. This change reduces the risk of privilege escalation due to X server bugs, but has some side effects: * it relies on logind and libpam-systemd * it relies on a kernel video driver (so the userspace component doesn't touch the hardware directly) * it needs X to run on the virtual console (VT) it was started from * it changes the location for storing the Xorg log from /var/log/ to ~/.local/share/xorg/ On systems where those are not available, the new xserver-xorg-legacy package is needed to allow X to run with elevated privileges. See the Xwrapper.config(5) manual page for configuration details. -- Julien Cristau <[email protected]> Tue, 27 Oct 2015 22:54:11 +0000 """
--- End Message ---
--- Begin Message ---On Fri, 06 Nov 2015 20:49:00 +0000 Niels Thykier <[email protected]> wrote: > Package: release-notes > Tags: stretch > > Hi, > > The following change should be documented for Stretch: > > """ > [...] > """ > Documented in r11232 Thanks, ~Niels
--- End Message ---
