Date: Tue, 17 Apr 2007 22:15:48 +0200 From: Stefan `Sec` Zehl <sec@42.org> To: Florent Thoumie <flz@FreeBSD.org> Cc: freebsd-x11@FreeBSD.org Subject: Re: ports/109497: x11-servers/xorg-fontserver rc.d/xfs.sh script missing "-user" Message-ID: <20070417201548.GB44061@ice.42.org> In-Reply-To: <200704161141.l3GBfrcY049525@freefall.freebsd.org> References: <200704161141.l3GBfrcY049525@freefall.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi, On Mon, Apr 16, 2007 at 11:41 +0000, Florent Thoumie wrote: > Synopsis: x11-servers/xorg-fontserver rc.d/xfs.sh script missing "-user" > > State-Changed-From-To: open->closed > State-Changed-By: flz > State-Changed-When: Mon Apr 16 11:40:38 UTC 2007 > State-Changed-Why: > I just checked and other OS'es seem to run it as root as well. > > If this is a real concern to you, just set xfs_flags="-user nobody" in > /etc/rc.conf. I think this is what you're looking for. Please note that if you set "xfs_user=" to something, the default rc.subr will already try to do something with it, and (silently) fail to start xfs at all. I do think fixing this would be more user friendly -- besides, its only a two-line patch anyway, and it doesn't even change the default of running as root. But if think it's important to refuse this change, I can certainly live without that patch. CU, Sec -- One of the main causes of the fall of the Roman Empire was that, lacking zero, they had no way to indicate successful termination of their C Programs.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070417201548.GB44061>