how to make Xwayland auto start on tizen-ivi-3.0 image
ppaalanen at gmail.com
Fri Sep 5 00:09:04 PDT 2014
On Fri, 5 Sep 2014 10:38:10 +0800
"Steve (YiLiang) Zhou" <szhou at telecomsys.com> wrote:
> Well, that’s a history problem. What’s the shortage of running things as root?
It is pretty much the same thing as why guns tend to have safeties, and
are kept in locked cabinets when not actively handled, with keys only
with those who know how to use them safely. It keeps your (system's)
health better protected.
...the few first hits on Google.
While all those are about logging in as root, it's not really
any different to starting programs as root from the init system.
Of course, if you are working on a closed embedded system which does
not talk with the outside world at all, the dangers of running
everything as root are smaller. However, you still compromise the
system's ability to recover from failures, as an unexpected fault may
screw up the system permanently, e.g. by overwriting files that are
required for basic operation. Like things in /usr.
If your /usr was read-only, you'd be much more guaranteed the system is
able to reboot into a working state if it ever goes haywire and starts
doing crazy things.
The less a process has privileges, the less damage it can cause
when it malfunctions or someone abuses it.
> From: magcius at gmail.com [mailto:magcius at gmail.com] On Behalf Of Jasper St. Pierre
> Sent: Friday, September 05, 2014 9:56 AM
> To: Steve (YiLiang) Zhou
> Cc: Pekka Paalanen; VanCutsem, Geoffroy; ivi at lists.tizen.org; wayland-devel at lists.freedesktop.org
> Subject: Re: how to make Xwayland auto start on tizen-ivi-3.0 image
> Don't run anything as root. Why does your application need to modify files under /usr/?
> On Thu, Sep 4, 2014 at 6:50 PM, Steve (YiLiang) Zhou <szhou at telecomsys.com> wrote:
> Thanks everyone,
> Xwayland already worked fine, we modify the user-session to use root
> login. The reason I want to start it with root is that our x11 app need
> modify a directory under /usr, app doesn't have the right.
More information about the wayland-devel