[gentoo-user] X w/o suid root [Was: from Firefox52: NO pure ALSA?]

[Ian Zimmerman]

On 2016-12-16 14:55, Ian Zimmerman wrote:

> My opinion above was based on debian bug #582041 [1] and the Ubuntu
> pages referenced by it.  Note that the bug is still open.  But it is
> possible that it only remains open due to non-KMS video drivers.  Now
> that I have your opinion (and I have Radeon too), I'll give it a try.
> Thanks.

Well, I tried, and it doesn't work for me.

After re-merging x11-base/xorg-server package with the new USE settings,
first I tried what I have always done when running with suid; namely,
starting X with an explicit vt argument, approximately thus:

Xorg vt${vt} -nolisten tcp -s 0 -dpms

where the vt variable it set dynamically, but it is actually the same vt
from which I run the command.  This results in:

[  2890.175] (++) using VT number 2

[  2890.175] (WW) xf86OpenConsole: VT_ACTIVATE failed: Operation not permitted
[  2890.175] (EE) 
Fatal server error:
[  2890.175] (EE) xf86OpenConsole: Switching VT failed
[  2890.175] (EE) 
[  2890.175] (EE) 

So then I removed the vt argument, thinking that the current vt should
be the default anyway - but apparently not, in this case I got:

[  3419.385] (EE) 
Fatal server error:
[  3419.385] (EE) parse_vt_settings: Cannot open /dev/tty0 (Permission denied)
[  3419.385] (EE) 
[  3419.385] (EE) 

and of course:

 [2+0]~$ ls -l /dev/tty0
crw--w---- 1 root tty 4, 0 Dec 16 14:31 /dev/tty0
 [3+0]~$ 

I wonder what I'm missing.  Provisional suspects: the *kits are setting
up perms for you in some odd non-Unixy but Xorg friendly way.

Kernel 4.4.26, xorg-server 1.18.4.

-- 
Please *no* private Cc: on mailing lists and newsgroups
Personal signed mail: please _encrypt_ and sign
Don't clear-text sign: http://cr.yp.to/smtp/8bitmime.html