[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#442879: x11-common: /usr/bin/X drops privileges too early



package x11-common
reopen 442879
thanks

On Mon, Sep 17, 2007 at 06:33:32PM +0200, Brice Goglin wrote:
> If you look at the beginning of the log, you should see that it didn't
> find the xorg-tv.conf file.

No, I don't. Neither a logfile is moved nor is one written. I don't see
anything.

> This is on purpose, for security reasons. Upstream X.org enables the use
> of any file as a custom config file. But the server outputs the first

But as you state yourself below, Debian doesn't. And even more - it does
not accept paths in the conf-file, that's why I have to give the plain
name:

holbe@darkside:/home/holbe% X :1 -xf86config /etc/X11/xorg-tv.conf
-nolisten tcp

Fatal server error:

Invalid argument for -xf86config
        For non-root users, the file specified with -xf86config must be
        a relative path and must not contain any ".." elements.
        Using default xorg.conf search path.

> So -config and -xf86config are modified in Debian to only accepts custom
> config files in /etc/X11. You didn't have the problem with 7.2-5 because

Well, they just don't.

> we only modified -config. Now we modify -xf86config too since the same
> security issue exists there too.

All right, so maybe I should just rename the bug to "-config/-xf86config
don't work anymore for non-root users" - if you like this more.

However, the issue remains: I cannot start any X server with a -config
or -xf86config option because of the error I mentioned in my first mail.


Mario
-- 
The social dynamics of the net are a direct consequence of the fact that
nobody has yet developed a Remote Strangulation Protocol.  -- Larry Wall

Attachment: signature.asc
Description: Digital signature


Reply to: