Bug#234788: Major data loss because of .xsession-errors

[Tomasz Wegrzanowski <taw@users.sf.net>]

On Sun, Feb 29, 2004 at 05:23:46PM -0500, Joey Hess wrote:
> Tomasz Wegrzanowski wrote:
> > When I tried it as root, X worked, but the /dev/null became 0600.
> > So it seems it wants to chmod 0600 .xsession-errors.
> 
> That would probably be a security hole (at least a DOS: make ld.so 600
> and the system stops working), but I cannot reproduce it with
> xserver-xfree86 4.2.1-10.

Only if you can ln -sf /lib/ld.so /root/.xsession-errors, what you
probably cannot. User with normal rights can't chmod /dev/null, and
that's (probably) why it crashes.