Colin Walters <[email protected]> writes:

> Ah, well I ship Xorg without the setuid bit, so the answer then is "you
> always use a display manager".   I think everyone who ships with Xorg
> setuid is insane, basically...

Making X able to run as a regular user is even nicer, but setuid has
been a persistent security pain that I'd love to not have.

> Hrm, so then are you arguing for a patch which attempts to detect this
> situation inside say AbortServer() and shortcuts to just doing that?

That sounds like magic to me.

Looking at AbortServer, I wonder if we couldn't just stop calling
CloseWellKnownConnections, OsCleanup and CloseDownDevices and just call
AbortDDX to get the screen back to sanity.

-- 
[email protected]

Attachment: pgp4rTZoEWEOg.pgp
Description: PGP signature

_______________________________________________
[email protected]: X.Org development
Archives: http://lists.x.org/archives/xorg-devel
Info: http://lists.x.org/mailman/listinfo/xorg-devel

Reply via email to