On 08-01-2022 15:45, skullnobrains wrote:
hello all
can anyone share why there is no option to drop privileges in xorg ?
for those of us who want some better privilege separations and either
do not care about hot plugging or can handle it some other way (such
as using the console keyboard and moused), it would be very convenient
to be able to start xorg as root and let it drop privileges (real and
effective) after opening required devices
Are you sure you can't achieve that using Xorg.wrap and Xwrapper.config ?
check man Xorg.wrap for details
likewise, it would be great to be able to define privileges on the
socket allowing members of a specific group (could be the X user's
main group) to use the display
thanks to anyone who cares to share some light on why this has never
been done. i believe i am not the first person thinking such an option
might come in handy
best regards
sk
Lone_Wolf
