Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 01 Sep 2017 21:05:35 +0000
From:      bugzilla-noreply@freebsd.org
To:        x11@FreeBSD.org
Subject:   maintainer-feedback requested: [Bug 221984] x11-servers/xorg-server: enable SECURITY extension
Message-ID:  <bug-221984-7141-zUwNRdsHfn@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-221984-7141@https.bugs.freebsd.org/bugzilla/>
References:  <bug-221984-7141@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
Anton Yuzhaninov <citrin+pr@citrin.ru> has reassigned Bugzilla Automation
<bugzilla@FreeBSD.org>'s request for maintainer-feedback to x11@FreeBSD.org:
Bug 221984: x11-servers/xorg-server: enable SECURITY extension
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D221984



--- Description ---
Created attachment 185979
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D185979&action=
=3Dedit
enable SECURITY X server extension

Attached patch enables SECURITY extension for X server. This will allow 'ssh
-X' to work. Currently ssh -X fails, because 'xauth generate' can't grab au=
th
data from running X server.

This extension is enabled in xorg package for many (may be most) Linux dist=
ros.

As I know it was disabled by default in xorg when XACE was added. But XACE =
is
not fully replaces SECURITY extension:

"In Red Hat Enterprise Linux 6, the X Security extension (XC-SECURITY) has =
been
disabled and replaced by X Access Control Extension (XACE). However, XACE d=
oes
not yet include functionality that was previously available in XC-SECURITY.
With this update, XC-SECURITY is enabled in the xorg-x11-server spec file on
Red Hat Enterprise Linux 6." [1]

1.
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/ht=
ml/6
.5_Technical_Notes/xorg-x11-server.html

I've not tested this change with slave ports, so in my patch I've added this
option only for ${SLAVE_PORT} =3D=3D "no".



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-221984-7141-zUwNRdsHfn>