Bug#400632: x11-common should not ship a SUID root binary
On Mon, Feb 04, 2008 at 12:53:35PM -0500, Stephen Frost wrote:
> Package: x11-common
> Severity: serious
> tags 400632 -wontfix
>
> Greetings,
>
> The setuid usr/bin/X binary should not be shipped with x11-common
> because it's not *needed* for X11 clients. That by itself is a good
> enough reason. Put it in xserver-xorg-core or similar, not in
> x11-common.
>
> Additionally, x11-common gets pulled in on server for things like
> libgd-xpm, which isn't entirely unreasonable if someone wants to
> generate an X pixmap on a server. One could also have, I dunno,
> *xterm* installed on a server for clients to use without have an X
> server installed on the same server. Unless xterm *requires*
> usr/bin/X, it shouldn't be installed as part of something xterm
> depends on.
The easy and obvious fix is to just ship this with xserver-xorg instead. To
be honest, I'm not sure why this ended up in x11-common instead of here.
- David Nusinow
Reply to: