Xserver needs to run as "root" on Linux / was: Re: [Xorg] Server side widgets
Roland Mainz
roland.mainz at nrubsig.org
Sun Jul 11 10:32:47 PDT 2004
Sean Middleditch wrote:
[snip]
> Third, speaking of root, do you really want all that complex code in
> such a process? The more code you have, the more potential bugs and
> security holes.
This is _ONLY_ a problem of the Linux Xserver. Solaris and other Unices
run their Xserver under plain user accounts. IMHO there should be
_urgendly_ some work on removing the requirement of running the Xserver
as "root". Things like a seperate group (e.g. "X11", "Xserver") +
setting ACLs on the neccesary /dev entries comes in mind... or turning
the drivers into kernel modules (AFAIK Solaris Xsun does it that way).
----
Bye,
Roland
--
__ . . __
(o.\ \/ /.o) roland.mainz at nrubsig.org
\__\/\/__/ MPEG specialist, C&&JAVA&&Sun&&Unix programmer
/O /==\ O\ TEL +49 641 7950090
(;O/ \/ \O;)
More information about the xorg
mailing list