Bug#196732: marked as done (xserver-common: improve documentation of allowed_users)
Your message dated Tue, 5 Aug 2003 02:42:22 -0500
with message-id <20030805074222.GK17389@deadbeast.net>
and subject line Bug#196732: xserver-common: nix 'allowed_users' in Xwrapper.config; use 'xok' group instead
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 9 Jun 2003 09:40:00 +0000
>From schamp@users.sourceforge.net Mon Jun 09 04:40:00 2003
Return-path: <schamp@users.sourceforge.net>
Received: from (ipresto.net) [63.110.140.63]
by master.debian.org with esmtp (Exim 3.35 1 (Debian))
id 19PJ8B-0003bt-00; Mon, 09 Jun 2003 04:39:59 -0500
Received: from tokamak.homeunix.net [207.214.135.106] by ipresto.net with ESMTP
(SMTPD32-7.13) id A6C2E2B30146; Mon, 09 Jun 2003 09:43:30 +0000
Received: (qmail 9426 invoked by uid 1000); 9 Jun 2003 09:39:57 -0000
Message-ID: <20030609093957.9425.qmail@tokamak.homeunix.net>
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Sean Champ <schamp@users.sourceforge.net>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: xserver-common: nix 'allowed_users' in Xwrapper.config;
use 'xok' group instead
X-Mailer: reportbug 2.10.1
Date: Mon, 09 Jun 2003 02:39:57 -0700
Delivered-To: submit@bugs.debian.org
X-Spam-Status: No, hits=-5.6 required=4.0
tests=BAYES_01,HAS_PACKAGE,SMTPD_IN_RCVD
version=2.53-bugs.debian.org_2003_05_24
X-Spam-Level:
X-Spam-Checker-Version: SpamAssassin 2.53-bugs.debian.org_2003_05_24 (1.174.2.15-2003-03-30-exp)
Package: xserver-common
Version: 4.2.1-7
Severity: wishlist
So, i try to run XFree86 after a woody-to-sid dist-upgrade.
Instead of getting the usal X startup, though, I get a message like
"user is not allowed to run the X server".
After an strace, I find out there's a particular configuation
directive in /etc/Xwrapper.config, which really boggles me -- namely,
the "allowed_users" directive.
If you want to control "who gets to run an application?", why do you
not use plain user/group privelages?
Here's a simple solution. It works with SuSE, like this; it would work
with Debian.
addgroup --system xok
chgrp xok /usr/X11R6/bin/XFree86
chmod o-x /usr/X11R6/bin/XFree86
...then, simply enough, add any user, to the 'xok' group, who needs to
run the x server.
problem solved. for this, there's no /etc/Xwrapper.config needed.
cheers
---
sean
-- System Information:
Debian Release: testing/unstable
Architecture: i386
Kernel: Linux tokamak.homeunix.net 2.4.21-rc6-xfs #1 SMP Wed Jun 4 05:43:09 PDT 2003 i586
Locale: LANG=C, LC_CTYPE=C
Versions of packages xserver-common depends on:
ii debconf 1.2.39 Debian configuration management sy
ii libc6 2.3.1-17 GNU C Library: Shared libraries an
ii xfree86-common 4.2.1-7 X Window System (XFree86) infrastr
-- debconf information excluded
---------------------------------------
Received: (at 196732-done) by bugs.debian.org; 5 Aug 2003 07:42:27 +0000
>From branden@deadbeast.net Tue Aug 05 02:42:23 2003
Return-path: <branden@deadbeast.net>
Received: from dhcp065-026-182-085.indy.rr.com (redwald.deadbeast.net) [65.26.182.85]
by master.debian.org with esmtp (Exim 3.35 1 (Debian))
id 19jwSd-0007Ar-00; Tue, 05 Aug 2003 02:42:23 -0500
Received: by redwald.deadbeast.net (Postfix, from userid 1000)
id EFA8B640BE; Tue, 5 Aug 2003 02:42:22 -0500 (EST)
Date: Tue, 5 Aug 2003 02:42:22 -0500
From: Branden Robinson <branden@debian.org>
To: 196732-done@bugs.debian.org
Subject: Re: Bug#196732: xserver-common: nix 'allowed_users' in Xwrapper.config; use 'xok' group instead
Message-ID: <20030805074222.GK17389@deadbeast.net>
References: <20030609093957.9425.qmail@tokamak.homeunix.net> <20030609170122.GD6716@deadbeast.net> <sc-3ee536d5-4c374ea2@tokamak.homeunix.net> <20030610160500.GK6716@deadbeast.net> <[🔎] 20030801201725.GI17389@deadbeast.net> <[🔎] 20030803122929.GA2974@tokamak.dtdns.net>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature"; boundary="ikqct/fZAlyRpWN7"
Content-Disposition: inline
In-Reply-To: <[🔎] 20030803122929.GA2974@tokamak.dtdns.net>
Mail-Copies-To: nobody
X-No-CC: I subscribe to this list; do not CC me on replies.
X-Manoj-Position-Advisory: Please note that Manoj Srivastava likely doubts any facts posited and opposes any conclusions reached in this message.
User-Agent: Mutt/1.5.4i
Delivered-To: 196732-done@bugs.debian.org
X-Spam-Status: No, hits=-21.8 required=4.0
tests=BAYES_20,EMAIL_ATTRIBUTION,IN_REP_TO,PGP_SIGNATURE_2,
QUOTED_EMAIL_TEXT,REFERENCES,REPLY_WITH_QUOTES,
USER_AGENT_MUTT
autolearn=ham version=2.53-bugs.debian.org_2003_07_20
X-Spam-Level:
X-Spam-Checker-Version: SpamAssassin 2.53-bugs.debian.org_2003_07_20 (1.174.2.15-2003-03-30-exp)
--ikqct/fZAlyRpWN7
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Sun, Aug 03, 2003 at 05:29:29AM -0700, Sean Champ wrote:
> On Fri, Aug 01, 2003 at 03:17:25PM -0500, Branden Robinson wrote:
> > To improve the documentation, I need to understand how the existing
> > documentation misled you. Otherwise this bug will go unresolved.
>=20
> The documentation is fine; the variable is what i was bothered about.
>=20
> That bug report is something that I'd rather forget, really; nothing seems
> to need to be changed, it was just a reaction born of annoyance.
>=20
> good day
Okay. Closing per submitter.
I agree that the variable should be renamed, probably to
"access_policy", but given the "managed-by-debconf" state of this file,
now is now a good time to try and transition it.
--=20
G. Branden Robinson | No math genius, eh? Then perhaps
Debian GNU/Linux | you could explain to me where you
branden@debian.org | got these... PENROSE TILES!
http://people.debian.org/~branden/ | -- Stephen R. Notley
--ikqct/fZAlyRpWN7
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
iEYEARECAAYFAj8vX94ACgkQ6kxmHytGonyimwCfVcSfdVPUdNA+pOlwh39JPDNY
orQAniQIS7iB2ZHWWVo+55OnX03tMsil
=KkTi
-----END PGP SIGNATURE-----
--ikqct/fZAlyRpWN7--
Reply to: