Gentoo Archives: gentoo-dev

From: Piotr Karbowski <slashbeast@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] x11-base/xorg-server: No longer enabling suid by default.
Date: Tue, 26 May 2020 07:59:08
Message-Id: 18b95110-384b-e5e4-dfdc-2dbc3dc57c6b@gentoo.org
In Reply to: Re: [gentoo-dev] x11-base/xorg-server: No longer enabling suid by default. by Philip Webb
1 Hi,
2
3 On 26/05/2020 09.23, Philip Webb wrote:
4 > 200526 Piotr Karbowski wrote:
5 >> On 26/05/2020 00.34, Philip Webb wrote:
6 >>> I'ld rather you didn't.
7 >> You didn't provided any rationale for that.
8 >
9 > I thought I did (smile).
10 >
11 >> Running X as root is anti-pattern, especially nowadays
12 >> when so little effort is required to not have to run it as root.
13 >
14 > I've never run X as root : it's not the UNIX way.
15
16 I am not sure if you're trolling me here, or you genuinely not
17 understand that regardless of what user you execute `startx` on, if Xorg
18 have suid, it will start as root.
19
20 >> You can either enable elogind
21 >
22 > Why would anyone want to abandon the long-successful UNIX method
23 > & adopt some complex replacement ?
24
25 I wouldn't call running X as root to be long successful UNIX method.
26 Back in the days there was no way to ran X without root, now there is.
27
28 >> or you can enable suid if you want to preserve your status quo,
29 >> we're talking here about defaults
30 >> that user can change if he has a reason to do so.
31 >
32 > Yes, this is a regular problem which is unavoidable :
33 > what should the default be ? -- I want the default to be
34 > what it's always been & what matches basic UNIX principles.
35 > I can add 'suid' to 'xorg-server' in package.use ,
36 > but why should I have to ? -- over to you for a rationale (smile).
37
38 I am not sure what kind of UNIX principles you're speaking about, the
39 default should be reasonable, running X as root is not, if someone want
40 to go against common sense and run X as root, he can do so, with
41 defaults to not run it as root.
42
43 -- Piotr.

Attachments

File name MIME type
signature.asc application/pgp-signature