[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#802544: marked as done (Xorg.wrap move to xorg-legacy broke X startup (permissions))



Your message dated Tue, 27 Oct 2015 17:05:47 +0000
with message-id <E1Zr7gx-0004xf-MV@franck.debian.org>
and subject line Bug#802544: fixed in xorg-server 2:1.17.3-1
has caused the Debian Bug report #802544,
regarding Xorg.wrap move to xorg-legacy broke X startup (permissions)
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
802544: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=802544
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: xserver-xorg-legacy
Version: 2:1.17.2-3
Severity: grave

I recently did an upgrade of X, which broke it on my machine.
Here are old (working) and new (broken) versions that apt-get
installed, as shown in /var/log/apt/history.log:

    xserver-xorg-core:amd64 (1.17.2-1.1, 1.17.2-3)

This upgrade has broken X startup for me.  Here is how
I start X (as ordinary user):

    exec setsid env -i \
        LOGNAME=$LOGNAME \
        USER=$USER \
        HOME=$HOME \
        PATH=$PATH \
        EDITOR=$EDITOR \
        DISPLAY=$DISPLAY \
        SHELL=$SHELL \
        TERM=$TERM \
        LANG=$LANG \
        X :0 vt63 \
            -dpi 106 \
            -nolisten tcp \
            -noreset \
            -keeptty \
            -novtswitch

Then I run my window manager.  This has worked for me
at least 10 years.  I am using KMS (Intel i965GM):

     $ fbset
    mode "1024x768"
        geometry 1024 768 1024 768 32
        timings 0 0 0 0 0 0 0
        accel true
        rgba 8/16,8/8,8/0,0/0
    endmode

     $ dmesg | grep fbcon:
    fbcon: inteldrmfb (fb0) is primary device

I have been able to run the X server (as an ordinary user)
using /usr/bin/X since modesetting was originally
implemented in the kernel.

Looking at the ChangeLog, I saw that /usr/bin/X was actually a
wrapper, which was moved to xserver-xorg-legacy.  Ok then:

    Install: xserver-xorg-legacy:amd64 (1.17.2-3)

Problem 1: after upgrade, permissions bad on device

    /usr/lib/xorg/Xorg.wrap: (EE) xf86OpenConsole:
      Cannot open virtual console 63 (Permission denied)

    That didn't happen before.  It's mode 0620 root:tty, and
    I'm not in the tty group, so the wrapper must have opened
    the terminal with escalated privs before the upgrade, but
    not after.  Note that I routinely "pkill X" to kill my
    server -- as the ordinary user that started it -- so it
    was definitely running without privs after initialization.
    It must have done something while setuid, and then dropped
    the privs.

    My /etc/X11/Xwrapper.config contains the single line:

        allowed_users=anybody

    I changed /dev/tty63 to mode 0666 to move past this, but
    then got a new problem.

Problem 2: after upgrade, IO ports operation not permitted:

    X: xf86EnableIOPorts: failed to set IOPL for I/O
      (Operation not permitted)

I tried invoking Xorg.wrap directly (to eliminate the new
shell script at /usr/bin/X) and also copying it into place as
/usr/bin/X, but neither works, same errors.  I traced it to be
sure it was running the wrapper.  Not clear to me why this is
broken, since the ChangeLog implies only that it moved to a
different package.  But clearly the behavior is different now
and it actually works differently.

Note, X *does* start fine as root with the new package, but, I
don't want to run my X server as root, and didn't have to
before this upgrade.

Note, I used same kernel before and after: 4.1.0-2-amd64

Downgrade fixes it:

    Commandline: apt-get install xserver-xorg-core=2:1.17.2-1.1
    Downgrade: xserver-xorg-core:amd64 (1.17.2-3, 1.17.2-1.1)
    Remove: xserver-xorg-legacy:amd64 (1.17.2-3),
        xserver-xspice:amd64 (0.1.4-3),
        xserver-xorg:amd64 (7.7+12)

    Commandline: apt-get install xserver-xorg=1:7.7+9
    Install: xserver-xorg:amd64 (7.7+9)

Note that I *do not* use systemd.  Please don't tell me I have
to either use systemd, or run my X server as root.  I didn't
have to do either before this upgrade.

Please advise; thanks.

--- End Message ---
--- Begin Message ---
Source: xorg-server
Source-Version: 2:1.17.3-1

We believe that the bug you reported is fixed in the latest version of
xorg-server, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 802544@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Julien Cristau <jcristau@debian.org> (supplier of updated xorg-server package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 27 Oct 2015 13:55:55 +0000
Source: xorg-server
Binary: xserver-xorg-core xserver-xorg-core-udeb xserver-xorg-dev xdmx xdmx-tools xnest xvfb xserver-xephyr xserver-xorg-core-dbg xserver-common xorg-server-source xwayland xserver-xorg-legacy
Architecture: source
Version: 2:1.17.3-1
Distribution: unstable
Urgency: medium
Maintainer: Debian X Strike Force <debian-x@lists.debian.org>
Changed-By: Julien Cristau <jcristau@debian.org>
Closes: 726041 801340 801487 802327 802544 802566 802618
Description: 
 xdmx       - distributed multihead X server
 xdmx-tools - Distributed Multihead X tools
 xnest      - Nested X server
 xorg-server-source - Xorg X server - source files
 xserver-common - common files used by various X servers
 xserver-xephyr - nested X server
 xserver-xorg-core-dbg - Xorg - the X.Org X server (debugging symbols)
 xserver-xorg-core-udeb - Xorg X server - core server (udeb)
 xserver-xorg-core - Xorg X server - core server
 xserver-xorg-dev - Xorg X server - development files
 xserver-xorg-legacy - setuid root Xorg server wrapper
 xvfb       - Virtual Framebuffer 'fake' X server
 xwayland   - Xwayland X server
Changes:
 xorg-server (2:1.17.3-1) unstable; urgency=medium
 .
   [ Julien Cristau ]
   * New upstream release
     - mi: fix typo in warning about overflowing queue (closes: #726041)
   * Refresh 02_kbsd-input-devd.diff and 03_static-nettle.diff.
   * Replace xorg-wrapper-envp.diff with a cherry-pick from master.
   * New patch xext-fix-udeb-build.diff to fix build regression in 1.17.3.
   * Add NEWS file for xserver-xorg-core with info about the -legacy split
     (closes: #801487).
   * Recommend libpam-systemd (closes:  #802544, #802618, #802327, #802566,
     probably others)
 .
   [ Andreas Boll ]
   * Use the correct repository for the Vcs-Git field (Closes: #801340).
     Thanks, Vagrant Cascadian.
   * Document new location for non-root Xorg log in the NEWS file.
 .
   [ Samuel Thibault ]
   * Fix xorg-wrapper on hurd (cherry-picked from master).
Package-Type: udeb
Checksums-Sha1: 
 31b5a6d3d33f37db13e76bc231771f7f748ddb35 4783 xorg-server_1.17.3-1.dsc
 3e16fb39b63f50ac2202a0f547bbb48e794efbba 8133840 xorg-server_1.17.3.orig.tar.gz
 cf18e16dde4eb545994315e066c4a0e15b6438aa 141262 xorg-server_1.17.3-1.diff.gz
Checksums-Sha256: 
 6b41d2f18ba21580d43ff78459cf44225667c00a5e0a7fe50a1d7fa4bc925157 4783 xorg-server_1.17.3-1.dsc
 43c0e5750d5bd1235e061671e8567bd8cdcfd1e6a69b6d01b5a8f81f715e8ed4 8133840 xorg-server_1.17.3.orig.tar.gz
 1cc7e27ce7af9d2140484e492618f867cbd59169309d608a720b8eb1c394a7b6 141262 xorg-server_1.17.3-1.diff.gz
Files: 
 44254b1cb04088fa4d2d24ec0e4d550c 4783 x11 optional xorg-server_1.17.3-1.dsc
 b539de7f3068c202bac58d24322bb285 8133840 x11 optional xorg-server_1.17.3.orig.tar.gz
 1ffd5bee626352258e811d8f0c9c79dd 141262 x11 optional xorg-server_1.17.3-1.diff.gz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=pMVJ
-----END PGP SIGNATURE-----

--- End Message ---

Reply to: