| 1 |
Hi, |
| 2 |
|
| 3 |
Re-sending news item inline. |
| 4 |
|
| 5 |
### |
| 6 |
|
| 7 |
Title: xorg-server dropping default suid |
| 8 |
Author: Piotr Karbowski <slashbeast@g.o> |
| 9 |
Posted: 2020-06-22 |
| 10 |
Revision: 1 |
| 11 |
News-Item-Format: 2.0 |
| 12 |
Display-If-Installed: x11-base/xorg-server |
| 13 |
|
| 14 |
The Gentoo X11 Team is announcing that starting with 15th of July, |
| 15 |
the x11-base/xorg-server will no longer default to suid and will default |
| 16 |
to using logind interface instead. This change makes xorg-server run as |
| 17 |
regular user rather than root by default, however, those who do not have |
| 18 |
any logind interface provider (either systemd or elogind) will need to |
| 19 |
enable either to make it possible to run X session as unprivileged user. |
| 20 |
|
| 21 |
No action is required from systemd and desktop profile users, since |
| 22 |
systemd provides logind interface, and desktop profile already enables |
| 23 |
'elogind' USE flag globally. |
| 24 |
|
| 25 |
Rest of the non-systemd users is required to globally enable 'elogind' |
| 26 |
USE flag and apply it by 'emerge --newuse @world', after which, re-login |
| 27 |
is required so that PAM can allocate seat. |
| 28 |
|
| 29 |
One can confirm that a seat has been assigned upon login by running: |
| 30 |
|
| 31 |
$ loginctl user-status |
| 32 |
|
| 33 |
Those who for whatever reason want to preserve current state, while |
| 34 |
heavily discourage, can still use x11-base/xorg-server with 'suid -elogind'. |
Archives