On Tue, Feb 20, 2018 at 12:00:20PM -0800, Jamie Zawinski wrote:
> There is absolutely no chance in hell that the xscreensaver daemon will
> ever, ever link with dbus. Over my dead body. For all of these reasons:
> https://www.jwz.org/xscreensaver/toolkits.html
With so many users forced to manually apply workarounds to this security
issue, goodness knows how many different other security issues are being
created. A single, minimal, audited solution would seem preferable to this
hodgepodge.
FWIW the overall security record of all those 15 libraries that are already
linked doesn't necessarily inspire a whole lot of confidence. It seems like
a tradeoff either way.
--
2. That which causes joy or happiness.
