From owner-freebsd-stable Thu Jul 25 4:20: 6 2002 Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id F050F37B400 for ; Thu, 25 Jul 2002 04:20:01 -0700 (PDT) Received: from HAL9000.homeunix.com (12-233-156-170.client.attbi.com [12.233.156.170]) by mx1.FreeBSD.org (Postfix) with ESMTP id 77F6343E84 for ; Thu, 25 Jul 2002 04:20:01 -0700 (PDT) (envelope-from dschultz@uclink.Berkeley.EDU) Received: from HAL9000.homeunix.com (localhost [127.0.0.1]) by HAL9000.homeunix.com (8.12.3/8.12.3) with ESMTP id g6PBKceA004466; Thu, 25 Jul 2002 04:20:38 -0700 (PDT) (envelope-from dschultz@uclink.Berkeley.EDU) Received: (from das@localhost) by HAL9000.homeunix.com (8.12.3/8.12.3/Submit) id g6PBKbqf004465; Thu, 25 Jul 2002 04:20:37 -0700 (PDT) (envelope-from dschultz@uclink.Berkeley.EDU) Date: Thu, 25 Jul 2002 04:20:36 -0700 From: David Schultz To: Erik Trulsson Cc: Andrew Boothman , "Maxim M. Kazachek" , stable@FreeBSD.ORG Subject: Re: X not suid root in 4.6.1-RC2? Message-ID: <20020725112036.GB4236@HAL9000.homeunix.com> Mail-Followup-To: Erik Trulsson , Andrew Boothman , "Maxim M. Kazachek" , stable@FreeBSD.ORG References: <20020725103641.U18384-100000@sbk-gw.sibnet.ru> <3D3F7AF3.8030202@cream.org> <20020725041956.GA75402@falcon.midgard.homeip.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20020725041956.GA75402@falcon.midgard.homeip.net> Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Thus spake Erik Trulsson : > > When installing via sysinstall users don't get shown the message > > explaining that they need xwrapper if the want to use startx. Does > > anyone else think that they should either be told or we just add > > xwrapper as a depandancy of the XFree86 package? > > Adding xwrapper as a dependency is a good idea. It is in fact such a > good idea that it has already been done, about a month ago. It isn't (shouldn't be) a dependency because you don't need it if you're running xdm from init. IIRC, the wrapper was split into a separate package for this reason. Moreover, if there is a locally exploitable vulnerability in the X server, installing the suid wrapper could potentially open a security hole. When you install X from ports, you get a big flashy notice telling you about the wrapper, and that should be good enough. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message