On 03/26/12 09:07 PM, Jamey Sharp wrote:
> Maybe I have it right this time: On Debian, there's no problem,
> because /usr/bin/X is a trivial suid wrapper and /usr/bin/Xorg is not
> installed suid. Solaris and other Unixes could take the same approach,
> right?
While I've heard about this before, I've not seen the sources for this wrapper
(can someone provide a pointer? all I'm finding in google is man pages & bug
reports that reference it)
However, if the suid wrapper allows non-root users to specify arbitrary files
to -config, then it's a dangerous security hole we can't allow (and since the
Debian people aren't stupid, I assume it does not). If it doesn't allow
-config through, then I don't see how it would help here.
--
-Alan Coopersmith- [email protected]
Oracle Solaris Engineering - http://blogs.oracle.com/alanc
_______________________________________________
[email protected]: X.Org development
Archives: http://lists.x.org/archives/xorg-devel
Info: http://lists.x.org/mailman/listinfo/xorg-devel
