non root X
Dave Airlie
airlied at redhat.com
Thu Aug 6 19:04:42 UTC 2009
On Thu, 2009-08-06 at 01:36 -0400, Ben Boeckel wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Dave Airlie wrote:
>
> > On Mon, 2009-08-03 at 15:08 +0530, Rahul Sundaram wrote:
> >> Hi
> >>
> >> A few days back I ran into
> >>
> >> http://lists.x.org/archives/xorg-devel/2009-July/001293.html
> >>
> >> I am wondering, since we are already using KMS in most places
> in Fedora,
> >> how far are we from achieving this by default in a Fedora
> release?
> >
> > non-root X is a big security hole at the moment, and until we
> get
> > revoke() support in the kernel, we can probably move X to
> running as a
> > special user, and maybe once we get revoke to running as the
> real user.
> >
> > However it doesn't solve the issue how we know we need or
> don't need
> > root since X only figures out what graphics drivers are needed
> after
> > starting, so if you needed a non-kms gpu driver we wouldn't
> know
> > until after we'd started as non-root.
> >
> > Dave.
> >
>
> Could permissions be raised temporarily? PolicyKit with
> (defaulted) auto-approve to load an appropriate driver?
Maybe we could do something with SELinux, but I don't think
we can do anything without getting revoke. or maybe some
process capabilties if such things worked.
Dave.
More information about the fedora-devel-list
mailing list