[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: X11 should not run as root or?



Am Sun, Jun 04, 2023 at 08:26:55PM +0200 schrieb Vincent Lefevre:
> On 2023-06-02 22:21:56 +0000, therealcyclist wrote:
> > Am Fri, Jun 02, 2023 at 07:07:05PM +0200 schrieb Michel Verdier:
> > > Le 2 juin 2023 therealcyclist a écrit :
> > > 
> > > > I tried the new Debian bookworm installer rc4 and i manually installed i3-wm.
> > > > I started i3 from tty with startx command as user.
> > > > to my surprise i found out that the xorg process is running as root.
> > > > that can't be intentional, can it?
> > > 
> > > Maybe because some display managers want xorg as root
> > > https://wiki.archlinux.org/title/Xorg#Rootless_Xorg
> > 
> > You linked to the Archlinux Wiki and I have installed i3-wm under
> > archlinux and there X11 runs without root privileges by default.
> > 
> > I assumed that it is the same under Debian because Debian is known
> > for having relatively safe default values.
> > It looks like i3 doesn't need x11 as root either.
> 
> i3-wm is a window manager, not a display manager. So it depends on
> what display manager you're using (if any).
> 

so we assume that the majority use a display manager who cares about this via polkit or similar.
x11 as root by default is a security risk to which all those running i3-wm under xinit are unnecessarily exposed.
unless they know what they are doing.

---


Reply to: