Date: Sun, 30 Apr 2000 01:28:17 -0700 (PDT) From: Kris Kennaway <kris@FreeBSD.org> To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: ports/x11/XFree86-4 Makefile Message-ID: <Pine.BSF.4.21.0004300126300.13182-100000@freefall.freebsd.org> In-Reply-To: <200004300821.BAA14444@freefall.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 30 Apr 2000, Kris Kennaway wrote:
> Modified files:
> x11/XFree86-4 Makefile
> Log:
> Mark FORBIDDEN due to the root hole in the X server reported on Bugtraq.
> I've tried *multiple* times to talk to an XFree86 developer about the
> problem, but they haven't deigned to respond to me.
Probably the best thing we could do is to add back Xwrapper support to the
port - for some reason which can only be described (a priori) as idiotic,
the XFree86 guys decided to remove Xwrapper (which is what prevents
XFree86-3.x from being vulnerable to this hole) and make the X server
itself setuid root again.
Kris
----
In God we Trust -- all others must submit an X.509 certificate.
-- Charles Forsythe <forsythe@alum.mit.edu>
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0004300126300.13182-100000>