On 2015-11-24 22:15:25 +0100, Michael Biebl wrote:
> Am 24.11.2015 um 21:47 schrieb Brian:
> > On Tue 24 Nov 2015 at 21:13:29 +0100, Michael Biebl wrote:
> >
> >> Am 24.11.2015 um 19:01 schrieb Brian:
> >>> On Tue 24 Nov 2015 at 17:36:49 +0100, Vincent Lefevre wrote:
> >>>
> >>>> On 2015-11-23 00:45:57 +0000, Brian wrote:
> >>>>> On Sun 22 Nov 2015 at 19:00:36 -0500, The Wanderer wrote:
> >>>>>
> >>>>>> On 2015-11-22 at 18:52, Chris Bannister wrote:
> >>>>> There are 2 reasons for this change:
^^^^^^^^^^^^^^^^^^^^^^^
> >>>>>
> >>>>> 1) It is needed to make Xorg run without root rights
> >>>>
> >>>> Do you mean that the user now needs to be root to do "startx -- vt7"?
> >>>
> >>> *I* don't mean anything. I was quoting what a developer said. But "no",
> >>> the user does not have to be root.
> >>
> >> That's completely the wrong way around.
> >
> > What is the wrong way round? I've merely said root is not necessary to
> > use startx. Surely that is not incorrect?
>
> This was not directed at you, just at the misconception that *now*
> startx needs root. Where actually up until recently it *actually*
> required root privileges (via SUID). That's what I meant with "wrong way
> around".
>
> That Xorg can now run as unprivileged user is something new (at least in
> Debian), and it's a very positive change.
I agree, but there's still a contradiction with the above: what Chris
said (quote from developers) is that X no longer uses a different TTY
so that X can run without root rights. If this is true, this means
that if the user wants to run X on a different terminal, e.g. with
"startx -- vt7", then X needs root rights, and since Xorg is no longer
SUID, this would mean that the user would have to be root to start X
in this way.
Said otherwise, if X does not need root rights with "startx -- vt7",
why is "It is needed to make Xorg run without root rights" given as
a reason for the change of behavior regarding the TTY?
--
Vincent Lefèvre <vinc...@vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)
