Bug#863891: /usr/lib/xorg/Xorg.wrap: Only console users are allowed to run the X server

[Brian Minton]

Package: xpra
Version: 2.1.3+dfsg-1
Followup-For: Bug #863891

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Just a quick "me-too" to mention that this bug still exists in the
newest version.

-BEGIN PGP SIGNATURE-

iHUEAREIAB0WIQT5xLt2Dng/DewQpoprjrOgZc+6qQUCWh2kfgAKCRBrjrOgZc+6
qfn/AP9sXtHjdloKJ0kjUkVpSwdiJIw4Z/zKgfIHVWD2MZw3IAD/abTpuUpesEH3
amBzKkaEawh0XgRvEaqf8Qf5JHHnpy6IdQQBFggAHRYhBO7QFYAT3C5tbgAepDe5
UHrP8gFuBQJaHaR+AAoJEDe5UHrP8gFu4UUBAOZyGfTCDs5YDH35FQmK3h/FtxnD
Ly/zjte84zz6ph1oAP4ukE0fttSLAENJUqPTTd8SAQ37EY7mZMCzbtxg0YgrBw==
=uUh5
-END PGP SIGNATURE-

Bug#863891: /usr/lib/xorg/Xorg.wrap: Only console users are allowed to run the X server

[Alberto Luaces]

Oops, since reportbug only shows the first message in the bug report, I
missed the description of the workaround.

It works as well for me.

Sorry for the noise.

Bug#863891: /usr/lib/xorg/Xorg.wrap: Only console users are allowed to run the X server

[Alberto Luaces]

Package: xpra
Version: 0.17.6+dfsg-1
Followup-For: Bug #863891

Dear Maintainer,

this is a «me too» post in order to add some more information.

I also cannot start a new session (xpra start :20) when sitting at my
desktop from a graphical environment, unlike the original reporter
who worked from a SSH connection.

-- System Information:
Debian Release: 9.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-3-amd64 (SMP w/8 CPU cores)
Locale: LANG=es_ES.UTF-8, LC_CTYPE=es_ES.UTF-8 (charmap=UTF-8), LANGUAGE= 
(charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages xpra depends on:
ii  adduser   3.115
ii  libavcodec57  7:3.2.5-1
ii  libavutil55   7:3.2.5-1
ii  libc6 2.24-11+deb9u1
ii  libgtk2.0-0   2.24.31-2
ii  libswscale4   7:3.2.5-1
ii  libvpx4   1.6.1-3
ii  libx11-6  2:1.6.4-3
ii  libx264-148   2:0.148.2748+git97eaef2-1
ii  libxcomposite11:0.4.4-2
ii  libxdamage1   1:1.1.4-2+b3
ii  libxext6  2:1.3.3-1+b2
ii  libxfixes31:5.0.3-1
ii  libxkbfile1   1:1.0.9-2
ii  libxrandr22:1.5.1-1
ii  libxtst6  2:1.2.3-1
ii  python2.7.13-2
ii  python-gi-cairo   3.22.0-2
ii  python-gtk2   2.24.0-5.1
ii  python-rencode1.0.5-1
ii  x11-xserver-utils 7.7+7+b1
ii  xserver-xorg-input-void   1:1.4.1-1+b2
ii  xserver-xorg-video-dummy  1:0.3.8-1

Versions of packages xpra recommends:
ii  keyboard-configuration 1.164
ii  ksshaskpass [ssh-askpass]  4:5.8.4-1
ii  openssh-client 1:7.4p1-10
ii  python-dbus1.2.4-1+b1
ii  python-gtkglext1   1.1.0-9.1
ii  python-imaging 4.0.0-4
ii  python-lz4 0.8.2+dfsg-2
ii  python-lzo 1.08-1
ii  python-pil 4.0.0-4
ii  ssh-askpass1:1.2.4.1-9+b2

Versions of packages xpra suggests:
ii  cups-common2.2.1-8
ii  cups-filters   1.11.6-3
pn  cups-pdf   
ii  gstreamer1.0-plugins-bad   1.10.4-1
ii  gstreamer1.0-plugins-base  1.10.4-1
ii  gstreamer1.0-plugins-good  1.10.4-1
ii  gstreamer1.0-plugins-ugly  1.10.4-1
ii  openssh-server 1:7.4p1-10
ii  pulseaudio 10.0-1
ii  pulseaudio-utils   10.0-1
ii  python-avahi   0.6.32-2
ii  python-cups1.9.73-1
ii  python-gst-1.0 1.10.4-1
ii  python-netifaces   0.10.4-0.1+b2
ii  python-opencv  2.4.9.1+dfsg1-2
pn  python-pyopencl
ii  python-yaml3.12-1
pn  v4l2loopback-dkms  

-- no debconf information

Bug#863891: /usr/lib/xorg/Xorg.wrap: Only console users are allowed to run the X server

[Brian Minton]

On 06/14/2017 09:52 AM, Simon Ruderich wrote
> A simple workaround is to modify PATH to prefer the non-setuid
> binary:
>
> PATH="/usr/lib/xorg:$PATH" xpra ...
I tried this and can verify that it worked.



signature.asc
Description: OpenPGP digital signature

Bug#863891: /usr/lib/xorg/Xorg.wrap: Only console users are allowed to run the X server

[Simon Ruderich]

On Thu, Jun 01, 2017 at 12:01:23PM -0400, Brian Minton wrote:
> When I check the log, I see an error about console users:
> bminton.is-a-geek.net:~/download$ cat ~/.xpra/\:42.log
> /usr/lib/xorg/Xorg.wrap: Only console users are allowed to run the X server
> 2017-06-01 11:57:26,652
> 2017-06-01 11:57:26,653 Xvfb command has terminated! xpra cannot continue
> 2017-06-01 11:57:26,653  if the display is already running, try a different 
> one,
> 2017-06-01 11:57:26,653  or use the --use-display flag
> 2017-06-01 11:57:26,653

Hello,

A simple workaround is to modify PATH to prefer the non-setuid
binary:

PATH="/usr/lib/xorg:$PATH" xpra ...

Or modify /etc/xpra/conf.d/55_server_x11.conf:

xvfb = /usr/lib/xorg/Xorg ...

The problem is the auto-detection during build-time which can't
find the proper path as Xorg is not installed in the build chroot
during installation.

Attached is a patch which adapts the path during build-time.

Regards
Simon
-- 
+ privacy is necessary
+ using gnupg http://gnupg.org
+ public key id: 0x92FEFDB7E44C32F9
Description: Fix path to Xorg binary in /etc/xpra/conf.d/55_server_x11.conf
 We need the (absolute) path to the non-setuid binary and not to a possibly
 installed setuid-wrapper (which requires root or login on a tty).
 Auto-dection fails as Xorg is not installed in the build environment.
 .
 As the Xorg setuid wrapper is Debian specific (and might be removed in the
 future) there's no need to upstream this change.
Author: Simon Ruderich 
Bug-Debian: https://bugs.debian.org/863891
Forwarded: not-needed
Last-Update: 2017-06-14

Index: xpra-2.0.2/setup.py
===
--- xpra-2.0.2.orig/setup.py
+++ xpra-2.0.2/setup.py
@@ -810,6 +810,8 @@ def detect_xorg_setup(install_dir=None):
 def build_xpra_conf(install_dir):
 #generates an actual config file from the template
 xvfb_command = detect_xorg_setup(install_dir)
+assert xvfb_command[0] == 'Xorg'
+xvfb_command[0] = '/usr/lib/xorg/Xorg'
 from xpra.platform.features import DEFAULT_ENV
 def bstr(b):
 if b is None:


signature.asc
Description: PGP signature

Bug#863891: /usr/lib/xorg/Xorg.wrap: Only console users are allowed to run the X server

[Brian Minton]

Package: xpra
Version: 0.17.6+dfsg-1
Severity: normal

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Dear Maintainer,

I ssh into my system (so I'm not on the console) and try to start an
xpra session.  

$ xpra start :42
Entering daemon mode; any further errors will be reported to:
  /home/bminton/.xpra/:42.log

However, the session is not started:
$ xpra list
xpra initialization error:
 No xpra sessions found

When I check the log, I see an error about console users:
bminton.is-a-geek.net:~/download$ cat ~/.xpra/\:42.log
/usr/lib/xorg/Xorg.wrap: Only console users are allowed to run the X server
2017-06-01 11:57:26,652 
2017-06-01 11:57:26,653 Xvfb command has terminated! xpra cannot continue
2017-06-01 11:57:26,653  if the display is already running, try a different one,
2017-06-01 11:57:26,653  or use the --use-display flag
2017-06-01 11:57:26,653 


- -- System Information:
Debian Release: 9.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.8.0-1-amd64 (SMP w/16 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages xpra depends on:
ii  adduser   3.115
ii  libavcodec57  10:3.3.1-dmo2
ii  libavutil55   10:3.3.1-dmo2
ii  libc6 2.24-11
ii  libgtk2.0-0   2.24.31-2
ii  libswscale4   10:3.3.1-dmo2
ii  libvpx4   1.6.1-3
ii  libx11-6  2:1.6.4-3
ii  libx264-148   3:0.148.2762+git90a61ec-dmo1
ii  libxcomposite11:0.4.4-2
ii  libxdamage1   1:1.1.4-2+b3
ii  libxext6  2:1.3.3-1+b2
ii  libxfixes31:5.0.3-1
ii  libxkbfile1   1:1.0.9-2
ii  libxrandr22:1.5.1-1
ii  libxtst6  2:1.2.3-1
ii  python2.7.13-2
ii  python-gi-cairo   3.22.0-2
ii  python-gtk2   2.24.0-5.1
ii  python-rencode1.0.5-1
ii  x11-xserver-utils 7.7+7+b1
ii  xserver-xorg-input-void   1:1.4.1-1+b2
ii  xserver-xorg-video-dummy  1:0.3.8-1

Versions of packages xpra recommends:
ii  keyboard-configuration   1.164
ii  ksshaskpass [ssh-askpass]4:5.8.4-1
ii  openssh-client   1:7.4p1-10
ii  python-dbus  1.2.4-1+b1
ii  python-gtkglext1 1.1.0-9.1
ii  python-imaging   4.0.0-4
ii  python-lz4   0.8.2+dfsg-2
ii  python-lzo   1.08-1
ii  python-pil   4.0.0-4
ii  ssh-askpass  1:1.2.4.1-9+b2
ii  ssh-askpass-gnome [ssh-askpass]  1:7.4p1-10

Versions of packages xpra suggests:
ii  cups-common 2.2.1-8
ii  cups-filters1.11.6-3
ii  gstreamer1.0-plugins-bad1:1.10.4-dmo2
ii  gstreamer1.0-plugins-base   1.10.4-1
ii  gstreamer1.0-plugins-good   1.10.4-1
ii  gstreamer1.0-plugins-ugly   1:1.10.4-dmo1
ii  openssh-server  1:7.4p1-10
ii  printer-driver-cups-pdf [cups-pdf]  3.0.1-4
ii  pulseaudio  10.0-1
ii  pulseaudio-utils10.0-1
ii  python-avahi0.6.32-2
ii  python-cups 1.9.73-1
pn  python-gst-1.0  
ii  python-netifaces0.10.4-0.1+b2
pn  python-opencv   
ii  python-pyopencl 2016.1+git20161130-1
ii  python-yaml 3.12-1
pn  v4l2loopback-dkms   

- -- no debconf information

-BEGIN PGP SIGNATURE-

iHUEAREIAB0WIQT5xLt2Dng/DewQpoprjrOgZc+6qQUCWTA6SgAKCRBrjrOgZc+6
qWHVAPwIuFySa2u4YPYMhaMxzfFJVNDJWVu5FEU4b6JmTcSmAgD/eh7wWdeYtVY/
wqHRIOGi2MJn8tNO8Sq51S+dKzPiLlKIdQQBFggAHRYhBO7QFYAT3C5tbgAepDe5
UHrP8gFuBQJZMDpTAAoJEDe5UHrP8gFugIwA/0JJYe5lE+YuEUfAMsq141KnlHHC
ngz67Rc5criGmjTsAP4j9nnYkMzEF/WbMjlXX8HCI3EbdCyF9zKUS45RroFVBQ==
=3Bog
-END PGP SIGNATURE-