Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 25 Jul 2002 04:20:36 -0700
From:      David Schultz <dschultz@uclink.Berkeley.EDU>
To:        Erik Trulsson <ertr1013@student.uu.se>
Cc:        Andrew Boothman <andrew@cream.org>, "Maxim M. Kazachek" <stranger@sberbank.sibnet.ru>, stable@FreeBSD.ORG
Subject:   Re: X not suid root in 4.6.1-RC2?
Message-ID:  <20020725112036.GB4236@HAL9000.homeunix.com>
In-Reply-To: <20020725041956.GA75402@falcon.midgard.homeip.net>
References:  <20020725103641.U18384-100000@sbk-gw.sibnet.ru> <3D3F7AF3.8030202@cream.org> <20020725041956.GA75402@falcon.midgard.homeip.net>

next in thread | previous in thread | raw e-mail | index | archive | help
Thus spake Erik Trulsson <ertr1013@student.uu.se>:
> > When installing via sysinstall users don't get shown the message 
> > explaining that they need xwrapper if the want to use startx. Does 
> > anyone else think that they should either be told or we just add 
> > xwrapper as a depandancy of the XFree86 package?
> 
> Adding xwrapper as a dependency is a good idea.  It is in fact such a
> good idea that it has already been done, about a month ago.

It isn't (shouldn't be) a dependency because you don't need it if
you're running xdm from init.  IIRC, the wrapper was split into a
separate package for this reason.  Moreover, if there is a locally
exploitable vulnerability in the X server, installing the suid
wrapper could potentially open a security hole.  When you install
X from ports, you get a big flashy notice telling you about the
wrapper, and that should be good enough.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020725112036.GB4236>