Bug#854627: root application will not run under wayland

2018-03-05 Thread Hector Oron
Hello,

  Andrius Štikona and Markus Ongyerth are totally right, AFAIK.
  If it's an X11 app that simply cannot be run without root, then you need the 
xhost command to allow only local connections from the root user.
  If it's a native Wayland app that cannot run without root, then you probably 
bind-mount the wayland socket from the user's $XDG_RUNTIME_DIR to the root's. 
(I've never done it myself)
  Whether such access should be granted by default to the root user is a policy 
decision, up for the DE or distribution or admin.
  Personally I'd like to see the access not granted, so there would be more 
pressure to fix the apps to not run GUI as root.
  Therefore I am resolving this issue as 'wontfix'.

Regards


signature.asc
Description: PGP signature


Bug#854627: root application will not run under wayland

2018-02-28 Thread Markus Ongyerth
Hi,

The cause of this problem is with how the X server is started by the gnome 
session (or to my knowledge all current wayland compositors).

Usually the xorg-xserver will have a magic cookie file somewhere protected by 
the unix user permissions that can be used to gain access to the server.
This file can be read by root, and therefore GUI applications started as root 
(whether that's sane or not) can connect to the users' X session.

Wayland compositors do not tell the Xwayland x11 server to use this mechanism, 
and therefore don't allow connecting via this method.

It is possible to allow it with `xhost +local:root`, but has the usual X 
security prolems.

Cheers,
ongy


signature.asc
Description: PGP signature