Xserver needs to run as "root" on Linux / was: Re: [Xorg] Server side widgets

Roland Mainz roland.mainz at nrubsig.org
Sun Jul 11 10:32:47 PDT 2004


Sean Middleditch wrote:
[snip]
> Third, speaking of root, do you really want all that complex code in
> such a process?  The more code you have, the more potential bugs and
> security holes.

This is _ONLY_ a problem of the Linux Xserver. Solaris and other Unices
run their Xserver under plain user accounts. IMHO there should be
_urgendly_ some work on removing the requirement of running the Xserver
as "root". Things like a seperate group (e.g. "X11", "Xserver") +
setting ACLs on the neccesary /dev entries comes in mind... or turning
the drivers into kernel modules (AFAIK Solaris Xsun does it that way).

----

Bye,
Roland

-- 
  __ .  . __
 (o.\ \/ /.o) roland.mainz at nrubsig.org
  \__\/\/__/  MPEG specialist, C&&JAVA&&Sun&&Unix programmer
  /O /==\ O\  TEL +49 641 7950090
 (;O/ \/ \O;)




More information about the xorg mailing list