[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Xorg replaces TTY1



Am 24.11.2015 um 19:01 schrieb Brian:
> On Tue 24 Nov 2015 at 17:36:49 +0100, Vincent Lefevre wrote:
> 
>> On 2015-11-23 00:45:57 +0000, Brian wrote:
>>> On Sun 22 Nov 2015 at 19:00:36 -0500, The Wanderer wrote:
>>>
>>>> On 2015-11-22 at 18:52, Chris Bannister wrote:
>>>>

>>>   There are 2 reasons for this change:
>>>
>>>   1) It is needed to make Xorg run without root rights
>>
>> Do you mean that the user now needs to be root to do "startx -- vt7"?
> 
> *I* don't mean anything. I was quoting what a developer said. But "no",
> the user does not have to be root.

That's completely the wrong way around.
So far X has needed root privileges. To allow unprvileged users to run
the X servers, the binary did have the SUID bit set, which is a big
security risk.

Since enabling logind support, it's actually possible to run Xorg as
unprivileged user.

Just check your process list with ps.
In wheezy Xorg was running as root, now it runs under your userid:

$ ps aux | grep Xorg
michael   1887  1.6  0.8 378436 71028 tty2     Sl+  03:08  18:22
/usr/lib/xorg/Xorg vt2 -displayfd 3 -auth /run/user/1000/gdm/Xauthority
-nolisten tcp -background none -noreset -keeptty -verbose 3


-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

Attachment: signature.asc
Description: OpenPGP digital signature


Reply to: