Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 29 Oct 2000 01:45:50 -0700
From:      Warner Losh <imp@village.org>
To:        Jean-Marc Zucconi <jmz@FreeBSD.org>
Cc:        Kris Kennaway <kris@citusc.usc.edu>, cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org, taguchi@tohoku.iij.ad.jp
Subject:   Re: cvs commit: ports/x11/XFree86-4 pkg-message Makefile pkg-install ports/x11/XFree86-4/files patch-config_cf_Server_tmpl 
Message-ID:  <200010290845.BAA62299@harmony.village.org>
In-Reply-To: Your message of "Sat, 28 Oct 2000 17:06:14 PDT." <200010290006.RAA33002@freefall.freebsd.org> 
References:  <200010290006.RAA33002@freefall.freebsd.org>  <200010282311.QAA13532@freefall.freebsd.org> <20001028164136.A82537@citusc17.usc.edu> 

next in thread | previous in thread | raw e-mail | index | archive | help
In message <200010290006.RAA33002@freefall.freebsd.org> Jean-Marc Zucconi writes:
: If the server is used with xdm, the suid bit is not required. And some
: people don't need a high level of security - after all no
: vulnerability has been found in the X server yet :-)

While this may be a sarcastic remark, there have been bugs found in
XFree86 4.0's X server that lead to root.  4.0.1 fixed them, but I
greatly fear a setuid X server.

Warner


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200010290845.BAA62299>