Jeremie Courreges-Anglas <[email protected]> wrote: > On Mon, Oct 26, 2026 at 08:18:58PM +0000, Edd Barrett wrote: > > On Wed, Oct 21, 2026 at 08:37:30PM +0200, Caspar Schutijser wrote: > > > Below is a diff to make xscreensaver work with _permit_setugid. > > > Run-time tested by me. > > > > > > Comments or OKs? > > > > FWIW, this unbreaks xscreensaver for me. > > I don't use this port but it sucks to have your screen locker broken > for more than 1 week. Caspar's diff is easy to review. ok jca@
I understand your perspective. But I extracted the source code and found this is software from approximately 1990 era with no mitigations. One buffer overflow or use after free, and this thing has way more privs than is reasononable. I do not understand the attitude of encouraging people to run unsafe crap.
