This clears it up, it's a matter of capabilities. When the
linux-privs folks get done properly adding capablities into the
system, we should be able to do without the Xwrapper, as X could be
set up with just the capabilities it needs.
jeff
Benjamin Scott wrote:
>
> On Mon, 3 Jul 2000, Derek Martin wrote:
> > $ which X
> > /usr/X11R6/bin/X
>
> On Mon, 3 Jul 2000, Jeffry Smith wrote:
> > Hm. My system shows /usr/X11R6/bin/X is a link to
> > /usr/X11R6/bin/Xwrapper ...
>
> Xwrapper is a small helper program whose only purpose is to give the X
> server the needed privileges to access the video hardware. Thus, Xwrapper is
> SUID root. It sets up the privileges then hands off control to the main X
> server program, which is not SUID. Xwrapper executes /etc/X11/X to start the
> X server.
>
> So, the sequence is:
>
> /usr/X11/bin/X -> /usr/X11/bin/Xwrapper -> /etc/X11/X -> /usr/X11/bin/XF86_*
>
> If you try to run your X server directly as a regular user, you will get a
> message like this:
>
> > xf86OpenConsole: Server must be running with root permissions
> > You should be using Xwrapper to start the server or xdm.
> > We strongly advise against making the server SUID root!
>
> I hope that clears everything right up. ;-)
>
> --
> Ben Scott <[EMAIL PROTECTED]>
> | "Suppose you were an idiot. And suppose you were a member of Congress. |
> | But I repeat myself." -- Mark Twain |
>
> **********************************************************
> To unsubscribe from this list, send mail to
> [EMAIL PROTECTED] with the following text in the
> *body* (*not* the subject line) of the letter:
> unsubscribe gnhlug
> **********************************************************
--
jeff smith
---------------------------------------------------------------------------------
thought for the day: Truth never comes into the world but like a
bastard, to the ignominy
of him that brought her birth.
-- Milton
**********************************************************
To unsubscribe from this list, send mail to
[EMAIL PROTECTED] with the following text in the
*body* (*not* the subject line) of the letter:
unsubscribe gnhlug
**********************************************************
