Your message dated Tue, 27 Oct 2015 17:05:47 +0000 with message-id <[email protected]> and subject line Bug#802544: fixed in xorg-server 2:1.17.3-1 has caused the Debian Bug report #802544, regarding Xorg.wrap move to xorg-legacy broke X startup (permissions) to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 802544: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=802544 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: xserver-xorg-legacy Version: 2:1.17.2-3 Severity: grave I recently did an upgrade of X, which broke it on my machine. Here are old (working) and new (broken) versions that apt-get installed, as shown in /var/log/apt/history.log: xserver-xorg-core:amd64 (1.17.2-1.1, 1.17.2-3) This upgrade has broken X startup for me. Here is how I start X (as ordinary user): exec setsid env -i \ LOGNAME=$LOGNAME \ USER=$USER \ HOME=$HOME \ PATH=$PATH \ EDITOR=$EDITOR \ DISPLAY=$DISPLAY \ SHELL=$SHELL \ TERM=$TERM \ LANG=$LANG \ X :0 vt63 \ -dpi 106 \ -nolisten tcp \ -noreset \ -keeptty \ -novtswitch Then I run my window manager. This has worked for me at least 10 years. I am using KMS (Intel i965GM): $ fbset mode "1024x768" geometry 1024 768 1024 768 32 timings 0 0 0 0 0 0 0 accel true rgba 8/16,8/8,8/0,0/0 endmode $ dmesg | grep fbcon: fbcon: inteldrmfb (fb0) is primary device I have been able to run the X server (as an ordinary user) using /usr/bin/X since modesetting was originally implemented in the kernel. Looking at the ChangeLog, I saw that /usr/bin/X was actually a wrapper, which was moved to xserver-xorg-legacy. Ok then: Install: xserver-xorg-legacy:amd64 (1.17.2-3) Problem 1: after upgrade, permissions bad on device /usr/lib/xorg/Xorg.wrap: (EE) xf86OpenConsole: Cannot open virtual console 63 (Permission denied) That didn't happen before. It's mode 0620 root:tty, and I'm not in the tty group, so the wrapper must have opened the terminal with escalated privs before the upgrade, but not after. Note that I routinely "pkill X" to kill my server -- as the ordinary user that started it -- so it was definitely running without privs after initialization. It must have done something while setuid, and then dropped the privs. My /etc/X11/Xwrapper.config contains the single line: allowed_users=anybody I changed /dev/tty63 to mode 0666 to move past this, but then got a new problem. Problem 2: after upgrade, IO ports operation not permitted: X: xf86EnableIOPorts: failed to set IOPL for I/O (Operation not permitted) I tried invoking Xorg.wrap directly (to eliminate the new shell script at /usr/bin/X) and also copying it into place as /usr/bin/X, but neither works, same errors. I traced it to be sure it was running the wrapper. Not clear to me why this is broken, since the ChangeLog implies only that it moved to a different package. But clearly the behavior is different now and it actually works differently. Note, X *does* start fine as root with the new package, but, I don't want to run my X server as root, and didn't have to before this upgrade. Note, I used same kernel before and after: 4.1.0-2-amd64 Downgrade fixes it: Commandline: apt-get install xserver-xorg-core=2:1.17.2-1.1 Downgrade: xserver-xorg-core:amd64 (1.17.2-3, 1.17.2-1.1) Remove: xserver-xorg-legacy:amd64 (1.17.2-3), xserver-xspice:amd64 (0.1.4-3), xserver-xorg:amd64 (7.7+12) Commandline: apt-get install xserver-xorg=1:7.7+9 Install: xserver-xorg:amd64 (7.7+9) Note that I *do not* use systemd. Please don't tell me I have to either use systemd, or run my X server as root. I didn't have to do either before this upgrade. Please advise; thanks.
--- End Message ---
--- Begin Message ---Source: xorg-server Source-Version: 2:1.17.3-1 We believe that the bug you reported is fixed in the latest version of xorg-server, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Julien Cristau <[email protected]> (supplier of updated xorg-server package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 27 Oct 2015 13:55:55 +0000 Source: xorg-server Binary: xserver-xorg-core xserver-xorg-core-udeb xserver-xorg-dev xdmx xdmx-tools xnest xvfb xserver-xephyr xserver-xorg-core-dbg xserver-common xorg-server-source xwayland xserver-xorg-legacy Architecture: source Version: 2:1.17.3-1 Distribution: unstable Urgency: medium Maintainer: Debian X Strike Force <[email protected]> Changed-By: Julien Cristau <[email protected]> Closes: 726041 801340 801487 802327 802544 802566 802618 Description: xdmx - distributed multihead X server xdmx-tools - Distributed Multihead X tools xnest - Nested X server xorg-server-source - Xorg X server - source files xserver-common - common files used by various X servers xserver-xephyr - nested X server xserver-xorg-core-dbg - Xorg - the X.Org X server (debugging symbols) xserver-xorg-core-udeb - Xorg X server - core server (udeb) xserver-xorg-core - Xorg X server - core server xserver-xorg-dev - Xorg X server - development files xserver-xorg-legacy - setuid root Xorg server wrapper xvfb - Virtual Framebuffer 'fake' X server xwayland - Xwayland X server Changes: xorg-server (2:1.17.3-1) unstable; urgency=medium . [ Julien Cristau ] * New upstream release - mi: fix typo in warning about overflowing queue (closes: #726041) * Refresh 02_kbsd-input-devd.diff and 03_static-nettle.diff. * Replace xorg-wrapper-envp.diff with a cherry-pick from master. * New patch xext-fix-udeb-build.diff to fix build regression in 1.17.3. * Add NEWS file for xserver-xorg-core with info about the -legacy split (closes: #801487). * Recommend libpam-systemd (closes: #802544, #802618, #802327, #802566, probably others) . [ Andreas Boll ] * Use the correct repository for the Vcs-Git field (Closes: #801340). Thanks, Vagrant Cascadian. * Document new location for non-root Xorg log in the NEWS file. . [ Samuel Thibault ] * Fix xorg-wrapper on hurd (cherry-picked from master). Package-Type: udeb Checksums-Sha1: 31b5a6d3d33f37db13e76bc231771f7f748ddb35 4783 xorg-server_1.17.3-1.dsc 3e16fb39b63f50ac2202a0f547bbb48e794efbba 8133840 xorg-server_1.17.3.orig.tar.gz cf18e16dde4eb545994315e066c4a0e15b6438aa 141262 xorg-server_1.17.3-1.diff.gz Checksums-Sha256: 6b41d2f18ba21580d43ff78459cf44225667c00a5e0a7fe50a1d7fa4bc925157 4783 xorg-server_1.17.3-1.dsc 43c0e5750d5bd1235e061671e8567bd8cdcfd1e6a69b6d01b5a8f81f715e8ed4 8133840 xorg-server_1.17.3.orig.tar.gz 1cc7e27ce7af9d2140484e492618f867cbd59169309d608a720b8eb1c394a7b6 141262 xorg-server_1.17.3-1.diff.gz Files: 44254b1cb04088fa4d2d24ec0e4d550c 4783 x11 optional xorg-server_1.17.3-1.dsc b539de7f3068c202bac58d24322bb285 8133840 x11 optional xorg-server_1.17.3.orig.tar.gz 1ffd5bee626352258e811d8f0c9c79dd 141262 x11 optional xorg-server_1.17.3-1.diff.gz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJWL6urAAoJEDEBgAUJBeQM5fsP/i8nvjsVsWlZYryElcfZHlsG SyUcELGI3aTyH4nW/MK4xcxugLczFzaifspcOWZLRFlt90thMjawqLBV2jhhdPax KQuxH4tjVY/crygWhYv+3HxSRs+C3+HOckifszSdwoGjLQc/ZmyzPN0gF/TtfdwJ zRJbyRA+NqQtU7Nseh7zyR9v5vw7vxb6ofZjzAhmGB4a11pdo+QBaAddb5MYcXOe K1rY94whbi/QEKUivgyYYJfSulksFzhpPGCovr1Xlm/D34HOj1pU54uB6lMeUycX EaVBzSJq+rbwNXDhwfWtSvLRendCp0O7SKsU2ZBdCXzI16S6G1vbr3XqeeYd0XOz DY0t3CYUHPDBClZ0qAPWgGxWOvzuP7aacHc7MA2jROx11dyPpUewIjYzBZ/2v1KW 7BKVCjkqAOGqtRSWQKBUCSDloCQ6bJIPxcnH4HVVejK5SfqcIkkV+iRRseyE5U+V qN0AAdJtjj6O2U+XZ6u3b9v6O35J8CIIMYd2sAmkh5ZxaZtNJBosy0SB3SQZaMZS YGSaAIele1yUE15NcffjieNc//uGbZBkRKCUwOLk9XtvMfu+EvZpWjoMme3cRHvM BiWMaLTjE+Gzw3ai5ijKwZHxgo6Dm0vXkiT59PGwe0XNn01TiAe1Ir8YKDSORbed f3CNBJs532twekCJ4ftW =pMVJ -----END PGP SIGNATURE-----
--- End Message ---
