> X servers currently need either gid 0 or uid 0 to get the privilege levels
> necessary for these operations:
>   - Power Management via /dev/pm (both platforms)
>   - priority control of processes in IA class via priocntl() (both platforms)
> 
> X servers currently need uid 0 to get the privilege levels necessary for
> these operations:
>   - access to PCI bus registers and mappings via /dev/xsvc (x86/x64 only)
>   - ability to set I/O Privilege Level (IOPL) via sysi86 (x86/x64 only)
> 
> When started via a display manager such as dtlogin or gdm, Xorg is started
> as uid 0 by the display manager, and once the user logs in via the display
> manager, it sets it's uid to the logged in user.  (This is after initializing
> the hardware, setting the IOPL and mapping /dev/xsvc, so uid 0 is no longer
> needed at that point.)
        
        How about other "login" managers, like xdm and whatever KDE uses?
        Wouldn't it be better for the X server to know when it's done
        initializing and drop its privileges then?

Gary..

Reply via email to