[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#400632: x11-common should not ship a SUID root binary



On Mon, Feb 04, 2008 at 12:53:35PM -0500, Stephen Frost wrote:
> Package: x11-common
> Severity: serious
> tags 400632 -wontfix
> 
> Greetings,
> 
> The setuid usr/bin/X binary should not be shipped with x11-common
> because it's not *needed* for X11 clients.  That by itself is a good
> enough reason.  Put it in xserver-xorg-core or similar, not in
> x11-common.
> 
> Additionally, x11-common gets pulled in on server for things like
> libgd-xpm, which isn't entirely unreasonable if someone wants to
> generate an X pixmap on a server.  One could also have, I dunno,
> *xterm* installed on a server for clients to use without have an X
> server installed on the same server.  Unless xterm *requires*
> usr/bin/X, it shouldn't be installed as part of something xterm
> depends on.

The easy and obvious fix is to just ship this with xserver-xorg instead. To
be honest, I'm not sure why this ended up in x11-common instead of here.

 - David Nusinow



Reply to: