Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 10 Jan 2005 11:53:40 -0800
From:      Brooks Davis <brooks@one-eyed-alien.net>
To:        Eric Anholt <eta@lclark.edu>
Cc:        x11@freebsd.org
Subject:   Re: x11 /tmp preparation rc.d script
Message-ID:  <20050110195340.GC15907@odin.ac.hmc.edu>
In-Reply-To: <1105321614.8452.54.camel@leguin>
References:  <1105321614.8452.54.camel@leguin>

next in thread | previous in thread | raw e-mail | index | archive | help
--1SQmhf2mF2YjsYvc
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sun, Jan 09, 2005 at 05:46:54PM -0800, Eric Anholt wrote:
> Attached are my proposed patches to deal with the X11 ICE issue.  To
> review, it's required because having .ICE not owned by root is a
> security issue, one that's been papered over with a printed warning and
> sleep(5) in libICE for years, and has recently been changed into an
> actual error by the X.Org folks.
>=20
> The question is whether to stick it in base or in ports:
>=20
> In favor of ports:
>   - Seems like the proper place.  Nothing happens for non-X11 users.
> In favor of base:
>   - Would either need to make a separate port just for the script, or
>     keep the script in at least 3 separate ports, disregarding the
>     cleanup of servers which might make for more ports affected.
>   - From ports, it might get started too late in the boot process, or
>     not at all in some installations.

It turns out that doing it in localpkg isn't a problem so we might want
to go ahead and do it that way.

One thing I've been wondering about is, why isn't startx/xdm doing
this creation?  They have the required privs and are garenteed not to
get in a race (since it would be with them selves).

-- Brooks

--=20
Any statement of the form "X is the one, true Y" is FALSE.
PGP fingerprint 655D 519C 26A7 82E7 2529  9BF0 5D8E 8BE9 F238 1AD4

--1SQmhf2mF2YjsYvc
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQFB4t1DXY6L6fI4GtQRAhPZAJ4nVJjL/SsPcSl4BUPZsjc0wBvm8gCdERT5
xvctx2Be+0fJrBdp4Hydm0s=
=K3xm
-----END PGP SIGNATURE-----

--1SQmhf2mF2YjsYvc--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050110195340.GC15907>