Date: Wed, 4 Mar 1998 15:46:14 -0800 (PST) From: Stefan Esser <se@FreeBSD.ORG> To: cvs-committers@FreeBSD.ORG, cvs-all@FreeBSD.ORG, cvs-ports@FreeBSD.ORG Subject: cvs commit: ports/x11/kdebase/patches patch-ai Message-ID: <199803042346.PAA07865@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
se 1998/03/04 15:46:14 PST
Added files:
x11/kdebase/patches patch-ai
Log:
Fix kfmsu2 (which actually should *never* be used on a multi-user system!)
The original version was not compatible with the FreeBSD version of "su"
(it assumed that "su - -c CMD" executed CMD as root), and it required root
to have a POSIX shell as login shell (not a C shell).
The original "xhost +local:root" could mislead the user to assume that
only root was given permission to access hist X11 display, but the user
parameter is ignored by xhost (as of XFree86 3.3.1). This allows *every*
user on the local system to grab all keypresses or screen contents while
kfmsu2 has not run to completion. Starting several instances of kfmsu and
leaving one will revoke access to the X11 display to all others ...
In fact, kfmsu might be considered *that* broken by design, that it should
not be installed, but it's a part of kdebase and I do not want to disable
it in case somebody has a legitimate use for it ...
The non-functionality of kfmsu was pointed out by Glenn Johnson.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199803042346.PAA07865>