Stuart Henderson wrote:
On 2026/10/21 20:37, Caspar Schutijser wrote:
Hi,
Below is a diff to make xscreensaver work with _permit_setugid.
Run-time tested by me.
Comments or OKs?
Caspar
Index: Makefile
===================================================================
RCS file: /cvs/ports/x11/xscreensaver/Makefile,v
diff -u -p -r1.125 Makefile
--- Makefile 17 Apr 2026 15:14:06 -0000 1.125
+++ Makefile 21 Oct 2026 18:37:09 -0000
@@ -9,7 +9,7 @@ COMMENT= screen saver and locker for the
# Ideally this wants a bsdauth driver to be written, change to being
# installed setgid auth, and figure out any issues resulting.
If someone wants a little coding project, the above would be handy...
(xscreensaver seems much better than xlock at stopping password
keypresses from getting through to terminals...)
Why not try to harden XLock, which comes pre-installed on the base system?
DISTNAME= xscreensaver-6.15
-REVISION= 1
+REVISION= 2
CATEGORIES= x11
Index: patches/patch-driver_xscreensaver-auth_c
===================================================================
RCS file: patches/patch-driver_xscreensaver-auth_c
diff -N patches/patch-driver_xscreensaver-auth_c
--- /dev/null 1 Jan 1970 00:00:00 -0000
+++ patches/patch-driver_xscreensaver-auth_c 21 Oct 2026 18:37:09 -0000
@@ -0,0 +1,13 @@
+Index: driver/xscreensaver-auth.c
+--- driver/xscreensaver-auth.c.orig
++++ driver/xscreensaver-auth.c
+@@ -71,6 +71,9 @@
+ #include "visual.h"
+ #include "auth.h"
+
++/* OpenBSD: set[ug]id binary MUST say so in this var */
++mode_t _permit_setugid = S_ISUID;
++
+ #ifdef __GNUC__
+ __extension__ /* shut up about "string length is greater than the length
+ ISO C89 compilers are required to support" when
including
