From nobody Tue Aug 12 13:57:34 2025 X-Original-To: dev-commits-src-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4c1Y3k67qSz64pbR; Tue, 12 Aug 2025 13:57:38 +0000 (UTC) (envelope-from fluffy@FreeBSD.org) Received: from smtp.freebsd.org (smtp.freebsd.org [IPv6:2610:1c1:1:606c::24b:4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4c1Y3k5BD7z3TRQ; Tue, 12 Aug 2025 13:57:38 +0000 (UTC) (envelope-from fluffy@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1755007058; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=gELMXH7TUqajZTGje4K3e8uAMln8DMyh0Sx4Qy9vqow=; b=i5BItjxAJuVI71f6blIQShIoc1kYdJeEiQrjcFyJ7UvsVb0ivOjjA9LbVLs7cmhnm7WN0y dR0y5roAKcpYPpokfQJHkWaJM7UMVeiO3Q08owHLfZkJnHwxzVL81uuK9biNOww+l/6YmC YMMT7yniqgmC0aPq8CCxTUTv6QmHsvP5ow4QS4e3cCb2WXyVrANVl+WkPgINEd48mXyv8U utdPQOwj2uAA9Gzn0Fh7enrGFpLcC3JqisU2xvP0gzZxJvegR+v6FVkLcyXYQDM5/pSrNe THQ5LSCYqx9RT1OnjZ9ItP1evDanDx8M0fBKuKgMGht1WQfd/AF1dtRUuoVZ5g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1755007058; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=gELMXH7TUqajZTGje4K3e8uAMln8DMyh0Sx4Qy9vqow=; b=NT6o5/nvbjXtmrWTO0fkLOqq9s7faXCFkDwhBwVVtbWGPnaVMsKLrNdhUh1n8ktd9GbGi/ aKHVqg+fjf+lMQrwMWtdkb9OhTMxDXOCmAhzz2L0efUvzSpG6doSn/dphCBZMDcCYBeOwZ b0XLBukboqLCS9Zu1i+DDSUvM//WFZbFL+JJTvwrbRF1iC3+YzJBRzYk6ynxiEBIeD7dyz KLVDKk3tHMIC8L3JMB1TbRdb3dA4q61zqjTRwL7mSKanDlq/MLWS3h2pnvHvOl6EFLGTHi B+6TLXKCcrE09Fq0CY2yAIcsSr3cl6dUzpCBUMa8/hWCAWeXfYRk9Q0mY23ccg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1755007058; a=rsa-sha256; cv=none; b=SevHoVQllD3uJOuD+eHtURrs4r4yFUksZo/QGvWdibnE3+8ak0UyA6f6AGhGLqBbf+wl+P XYhhWCaO1Es/2GbN7e0zDNa1Gf/PLISi25+0QdXoZtxXn26YJgzD+kFvtL+0Epf+RFvgUN 8ewOsflO+gFG48AVgYHuHS4LhHE13cNhVi+XQPu/ZiCjQ8Cg59/c0q22ioP0AOo1fe6Wg1 ZTwmzpdFgozXMuoMwlbsN+oRw/HwrZyZ9dag+BIkhJt/EaQHxRdADAcsjJT38l43Tb+K0Q ZTBc/PiM2StU0FIUF3IXQsEs1MJVOgLMPEXMGwuOKd1Wne9xm77xQWi+6qqWYQ== Received: from [100.109.252.209] (unknown [176.15.166.221]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) (Authenticated sender: fluffy) by smtp.freebsd.org (Postfix) with ESMTPSA id 4c1Y3j4Tw7zZ0p; Tue, 12 Aug 2025 13:57:37 +0000 (UTC) (envelope-from fluffy@FreeBSD.org) Date: Tue, 12 Aug 2025 16:57:34 +0300 From: Dima Panov To: Lexi Winter Cc: dev-commits-src-all@freebsd.org, dev-commits-src-main@freebsd.org, src-committers@freebsd.org Message-ID: <7548b9c4-ada1-4bb7-a649-2bdbdbb03cd9@Canary> In-Reply-To: References: <202508101537.57AFbHrI067216@gitrepo.freebsd.org> <851c968c-923a-4809-83d4-b0600e70867b@Canary> <8e7a9c07-5efd-4450-a590-a6aeaa59b402@Canary> Subject: Re: git: 7ac276298b72 - main - Remove Secure RPC DES authentication X-Canary-Draft: 2 List-Id: Commit messages for the main branch of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-main@freebsd.org Sender: owner-dev-commits-src-main@FreeBSD.org MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="689b484e_1d0bcfe9_50e" --689b484e_1d0bcfe9_50e Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Indeed, disable secure-rpc build flag for all xservers looks reasonable, = I=E2=80=99ll try it now and commit if build will be successfull. -- Dima. (desktop, kde, x11, office, ports-secteam)=40=46reeBSD team (fluffy=40=46reeBSD.org, https://t.me/=46luffyBSD) > On =D0=B2=D1=82=D0=BE=D1=80=D0=BD=D0=B8=D0=BA, =D0=B0=D0=B2=D0=B3. 12, = 2025 at 4:35 PM, Lexi Winter wrote: > hi Dima, > > Dima Panov: > > All xservers are affected. > > > > However, upstream already deal with it in commit > > https://gitlab.freedesktop.org/xorg/xserver/-/commit/71b207a2ebc1465c= 7d9ad9262f60930f6a1d42ee > > it looks like you could also pass -Dsecure-rpc=3Dfalse to Meson for old= er > servers. are either of these acceptable or do you want to consider > reverting this change=3F > > (i was trying to build x11-servers/xwayland to test this, but it's taki= ng > a long time as i had to fix some unrelated broken ports along the way.)= --689b484e_1d0bcfe9_50e Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline <= meta name=3D=22viewport=22 content=3D=22width=3Ddevice-width, initial-sca= le=3D1.0, user-scalable=3Dno=22>
Indeed, disable secure-rpc build flag for all xse= rvers looks reasonable, I=E2=80=99ll try it now and commit if build will = be successfull.=C2=A0

--
Dima. (desktop, kde, x11, office, ports-= secteam)=40=46reeBSD team
(fluffy=40=46reeBSD.org, https://t.me= /=46luffyBSD)

<= div>On =D0=B2=D1=82=D0=BE=D1=80=D0=BD=D0=B8=D0=BA, =D0=B0=D0=B2=D0=B3. 12= , 2025 at 4:35 PM, Lexi Winter <ivy=40freebsd.org> wrote:
hi Dima,

Dima P= anov:
All xservers are affected.
<= br>However, upstream already deal with it in commit
https://gitlab.fr= eedesktop.org/xorg/xserver/-/commit/71b207a2ebc1465c7d9ad9262f60930f6a1d4= 2ee

it looks like you could also pass -Dsecure-rpc=3D= false to Meson for older
servers. are either of these acceptable or d= o you want to consider
reverting this change=3F

(i was tryin= g to build x11-servers/xwayland to test this, but it's taking
a long = time as i had to fix some unrelated broken ports along the way.)
--689b484e_1d0bcfe9_50e--