[ANNOUNCE] xauth 1.0.5

2010-09-23 Thread Alan Coopersmith
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

The xauth program is used to edit and display the authorization
information used in connecting to the X server.

This minor maintenance release fixes a couple bugs and includes the usual
recent build improvements/janitorial cleanups.

Alan Coopersmith (4):
  Bug 7051: xauth says creating new authority file even though it does not
  config: Remove unnecessary calls from configure.ac
  config: upgrade to util-macros 1.8 for additional man page support
  xauth 1.0.5

Gaetan Nadon (6):
  .gitignore: use common defaults with custom section # 24239
  Makefile.am: ChangeLog not required: EXTRA_DIST or *CLEANFILES #24432
  Deploy the new XORG_DEFAULT_OPTIONS #24242
  INSTALL, NEWS, README or AUTHORS files are missing/incorrect #24206
  Makefile.am: add ChangeLog and INSTALL on MAINTAINERCLEANFILES
  config: update AC_PREREQ statement to 2.60

Jeremy Huddleston (3):
  This is not a GNU project, so declare it foreign.
  launchd: Properly support launchd sockets in xauth
  Fix build failure resulting from previous commit on systems without 
strlcpy

git tag: xauth-1.0.5

http://xorg.freedesktop.org/archive/individual/app/xauth-1.0.5.tar.bz2
MD5:  46fc44e5e947d3720f3be5054044ff0e
SHA1: 6d94b5822e8ce08630a8ff510230246d5ed45290

http://xorg.freedesktop.org/archive/individual/app/xauth-1.0.5.tar.gz
MD5:  3919aeb4f304240a5fd40e6704672dec
SHA1: 5e7e978f79352069062b51138a4a2977ffa701bf


- --
-Alan Coopersmith-alan.coopersm...@oracle.com
 Oracle Solaris Platform Engineering: X Window System

-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.9 (SunOS)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkyb+IYACgkQovueCB8tEw5j6QCfUhvd6t5x87zblWfkmEjj3ad6
WxkAnAjtJ4fHy1QOKD/wUaATQm4I06ML
=Pp9v
-END PGP SIGNATURE-
___
xorg-announce mailing list
xorg-announce@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/xorg-announce


[ANNOUNCE] xclock 1.0.5

2010-09-23 Thread Alan Coopersmith
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

This minor maintenance release of the classic non-shaped window clock fixes
a crash on startup on 64-bit architectures and includes the usual set of
recent build improvements/janitorial cleanups.

Alan Coopersmith (5):
  Update Sun license notices to current X.Org standard form
  config: upgrade to util-macros 1.8 for additional man page support
  Xmu functions are called directly, so include it in PKG_CHECK_MODULES
  Sun's copyrights now belong to Oracle
  xclock 1.0.5

David Coppa (1):
  Fix a crash on sparc64.

Gaetan Nadon (7):
  .gitignore: use common defaults with custom section # 24239
  Makefile.am: ChangeLog not required: EXTRA_DIST or *CLEANFILES #24432
  Deploy the new XORG_DEFAULT_OPTIONS #24242
  INSTALL, NEWS, README or AUTHORS files are missing/incorrect #24206
  Makefile.am: add ChangeLog and INSTALL on MAINTAINERCLEANFILES
  configure.ac: use backticks rather than $() for cmd subs
  config: update AC_PREREQ statement to 2.60

Jeremy Huddleston (1):
  Remove extraneous  reference to HAS_STRLCAT

Peter Hutterer (1):
  Add INSTALL to .gitignore. (#24157)

git tag: xclock-1.0.5

http://xorg.freedesktop.org/archive/individual/app/xclock-1.0.5.tar.bz2
MD5:  eaf124bbc9d13e1a12a29faaa2ed3612
SHA1: 1651ac8961c0aa287a6a7412ee5e6d3bfc3bb3e2

http://xorg.freedesktop.org/archive/individual/app/xclock-1.0.5.tar.gz
MD5:  3ccd96e25f99a8c667c00782af7d1c5e
SHA1: 0c8209b72cfd4b0662b80cf4450dab374d3ca6c3


- --
-Alan Coopersmith-alan.coopersm...@oracle.com
 Oracle Solaris Platform Engineering: X Window System

-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.9 (SunOS)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkycA0gACgkQovueCB8tEw6qswCffk9Tt/ARnq+h2E95FZkGlR3c
uYoAn24b8lmShsf7TWqeMpmDJhxh9cQf
=XKwD
-END PGP SIGNATURE-
___
xorg-announce mailing list
xorg-announce@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/xorg-announce


[ANNOUNCE] xcmsdb 1.0.3

2010-09-23 Thread Alan Coopersmith
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

xcmsdb is used to load, query, or remove Device Color Characterization
data stored in properties on the root window of the screen as
specified in section 7, Device Color Characterization, of the
X11 Inter-Client Communication Conventions Manual (ICCCM).

This minor maintenance release provides only corrections to the COPYING
notice and the usual round of recent build improvements  janitorial cleanups.

Alan Coopersmith (4):
  Add Open Group notice to COPYING for man page
  config: upgrade to util-macros 1.8 for additional man page support
  config: Remove unnecessary calls from configure.ac
  xcmsdb 1.0.3

Gaetan Nadon (6):
  .gitignore: use common defaults with custom section # 24239
  Makefile.am: ChangeLog not required: EXTRA_DIST or *CLEANFILES #24432
  INSTALL, NEWS, README or AUTHORS files are missing/incorrect #24206
  Makefile.am: add ChangeLog and INSTALL on MAINTAINERCLEANFILES
  COPYING: replace stub with actual copyright notice
  config: update AC_PREREQ statement to 2.60

git tag: xcmsdb-1.0.3

http://xorg.freedesktop.org/archive/individual/app/xcmsdb-1.0.3.tar.bz2
MD5:  a8f013229f7234d582e0ee2c89879e30
SHA1: 14df39b4d5518f551302c210131dcc5bac03f3ff

http://xorg.freedesktop.org/archive/individual/app/xcmsdb-1.0.3.tar.gz
MD5:  543d9e18c887eae1d98060249a8521e0
SHA1: 318cb9c5248d9eb5220ce2ba3905211e2bc9b5cf


- --
-Alan Coopersmith-alan.coopersm...@oracle.com
 Oracle Solaris Platform Engineering: X Window System

-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.9 (SunOS)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkycCdIACgkQovueCB8tEw4H3gCfVfCU8zIop15G6LqGJq50O2Tl
zWwAoJQaytsiRx7+qnmSNVYxqF0tM9QP
=IwBz
-END PGP SIGNATURE-
___
xorg-announce mailing list
xorg-announce@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/xorg-announce


[ANNOUNCE] xconsole 1.0.4

2010-09-23 Thread Alan Coopersmith
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

xconsole displays in a X11 window the messages which are usually sent
to /dev/console

This minor maintenance release includes several years of build improvements
and janitorial fixes, including support for building without libXaw8 macros.

Alan Coopersmith (7):
  Remove errant #error I_PUSH from SVR4 code path
  Add README with pointers to mailing lists, bugzilla,  git
  config: upgrade to util-macros 1.8 for additional man page support
  Xmu functions are called directly, so include it in PKG_CHECK_MODULES
  Fill in COPYING file with copyright notices from source code
  config: Remove unnecessary calls from configure.ac
  xconsole 1.0.4

Gaetan Nadon (7):
  .gitignore: use common defaults with custom section # 24239
  Deploy the new XORG_DEFAULT_OPTIONS #24242
  INSTALL, NEWS, README or AUTHORS files are missing/incorrect #24206
  Makefile.am: add ChangeLog and INSTALL on MAINTAINERCLEANFILES
  configure.ac: use backticks rather than $() for cmd subs
  config: move CWARNFLAGS from configure.ac to Makefile.am
  config: update AC_PREREQ statement to 2.60

James Cloos (2):
  Add *~ to .gitignore to skip patch/emacs droppings
  xaw8 is gone, use xaw7

Jeremy Huddleston (1):
  Build fix for file systems that are not case sensitive

Julien Cristau (3):
  Fix build with builddir != srcdir
  $(builddir) is the current directory
  Fix header inclusion for openpty()

Matthieu Herrb (1):
  Prevent inclusion of stropts.h on Linux.

Paulo Cesar Pereira de Andrade (1):
  Ansification and compile warning fixes.

git tag: xconsole-1.0.4

http://xorg.freedesktop.org/archive/individual/app/xconsole-1.0.4.tar.bz2
MD5:  8665c037032e5f6a3acd4b341749aa17
SHA1: 195299d4948ba4c62e961ddd0bd4572283244715

http://xorg.freedesktop.org/archive/individual/app/xconsole-1.0.4.tar.gz
MD5:  c617acec432901a3c1a2b23b022624cb
SHA1: d43837ceecc282b5c7e6d94e91123ee355ff1870


- --
-Alan Coopersmith-alan.coopersm...@oracle.com
 Oracle Solaris Platform Engineering: X Window System

-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.9 (SunOS)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkycDoMACgkQovueCB8tEw6psgCaAwWFQtjunjx0kvcW7PXjAako
BM8AnAlZxoClI5aRNeHmW8cgVA6ObQY0
=hnBc
-END PGP SIGNATURE-
___
xorg-announce mailing list
xorg-announce@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/xorg-announce


Re: Create a *real* top level window

2010-09-23 Thread The Rasterman
On Thu, 23 Sep 2010 16:53:37 +0300 Timo Juhani Lindfors timo.lindf...@iki.fi
said:

 Carsten Haitzler (The Rasterman) ras...@rasterman.com writes:
  modules/plugins at least in enlightenment (0.17 devel) can let you do just
  about anything as they run inside the wm and have all privileges the wm
  enjoys.
 
 Thanks for the hints. However, if the window manager runs as normal
 user then normal user can easily use e.g. ptrace() to connect to the
 wm and disable any such features. Are you aware of any window managers

correct. you could run it as another user... but... it's x11. all bets are off
if you know enough. you can fight the wm with override-redirect windows and
more. it's not perfect, but if the aim is to circumvent just long enough to get
by some security - then you will win. running as another user or not. x11
flattens the power hierarchy significantly :) though pstrace won't help you
much - but such wm's that allow extending will allow the user to go disable
your module. the bi-product of that power being able to turn it on.. is also
able to turn it off :)

 that'd support running them as a separate user? At least with icewm
 that does not quite work = all processes started from its menus would
 then also be started as this separate wm-user and not the normal
 unprivileged user.

correct. any launching would need to go via a messaging interface to a launcher
daemon running as the user or via some change user id mechanism per launch.

 If I prefix all menu entries with sudo -u normal-user ... then I can
 not let normal users modify the menus, clearly not an option.

correct. if your aim is to lock a user out of his own desktop while his login
session is still there... and allow him regular access  too - you're out of
luck. in the x11 world access gets flattened. the user is pretty much king.
sure - the wm gets to call the shots for most things, but... the user controls
the wm. it's like the super-tool for x11. and most wm's take the theory that
user is king (not sysadmin) and will.

my suggestions is to stand back and totally rethink what you are trying to do.
in the standard x11 world the display has no access hierarchy. it's flat. the
logged in user is king. you'd have to modify the xserver itself to have such a
separation and provide a back-channel that can only be accessed by root to
implement what you want. reality otherwise is that any x client can kill off
another x client. any x client can grab the server, keyboard or pointer. x
pretty much assumes someone authorised to connect to x is king of the display
and allowed to - has the right to do anything they like and call the shots.
wm's,cm's etc. are just mechanisms via which such rules can be enforced - but
in the end the user controls the wm and cm, thus controls the display. keep
that in mind. maybe what you are trying to do is not such a good idea? maybe
its hard to do because it is particularly user-unfriendly when x11 considers
the user in charge?

(note i'm ignoring some of the more obscure x security extension - definitely
not standard/common).

-- 
- Codito, ergo sum - I code, therefore I am --
The Rasterman (Carsten Haitzler)ras...@rasterman.com

___
xorg@lists.freedesktop.org: X.Org support
Archives: http://lists.freedesktop.org/archives/xorg
Info: http://lists.freedesktop.org/mailman/listinfo/xorg
Your subscription address: arch...@mail-archive.com


Re: Create a *real* top level window

2010-09-23 Thread The Rasterman
On Thu, 23 Sep 2010 15:40:47 +0200 Eeri Kask eeri.k...@mailbox.tu-dresden.de
said:

 On 09/23/2010 03:06 PM, Carsten Haitzler (The Rasterman)
 ras...@rasterman.com wrote:
  BTW, as most WMs also deal with input focus management,
  and as most WMs wrongly ignore OverrideRedirect windows
  in practise, you have to forcefully 'recover' focus too
  on each FocusOut event... the same you raise the window
  (assuming your client expects input of course).  :-)
 
  wrongfully ignore override-redirect? they have little choice.
  x11 core has defined that they are to bypass the wm.
  no map redirects for them. dont blame wm's.
 
 No I don't,  though it looks like the current server implementation
 only ensures WMs have no advantage in knowing something about their
 geometrical structure '_in_advance_'  (in respect to all other
 clients).  I haven't read, but maybe the spec just says this. :-)

map redirects dont provide advance knowledge. they provide an intercept
point. override-redirect windows bypass such an intercept point. the wm can
only passively listen and try and fight these windows after-the-fact. and
that just leads to a complete mess  they are intended for bypassing the wm.
also as such focus out doesnt need to be fought by stealing focus back. it
can grab the keyboard and until its killed off as a client, will keep the
keyboard control until it gives it up.

-- 
- Codito, ergo sum - I code, therefore I am --
The Rasterman (Carsten Haitzler)ras...@rasterman.com

___
xorg@lists.freedesktop.org: X.Org support
Archives: http://lists.freedesktop.org/archives/xorg
Info: http://lists.freedesktop.org/mailman/listinfo/xorg
Your subscription address: arch...@mail-archive.com


Re: patch: libXt-1.0.8 fix possible array overflow

2010-09-23 Thread walter harms


Barry Scott schrieb:
 On Wednesday 22 September 2010 08:18:21 walter harms wrote:
 hi List,
 the code checks the upperlimit to 10 while the upperlimit is actualy 9.
 
 You could use (sizeof( par )/sizeof( String ))-1 to make the code robust 
 aginst
 a change to the size of par.
 

yep, i could use XtNumber(), personally i prefer

i%=10;
par=Xtmalloc(i*sizeof(String));

but i wanted to fix the overflow first.

the point i to not understand what do they copy the pointer at all ?
they could yjust do the fprintf() and ready ..


re,
 wh



and change to printf below into a loop



 Barry
 
 re,
  wh


 --- libXt-1.0.8/src/Error.c.org 2010-09-21 23:23:00.0 +0200
 +++ libXt-1.0.8/src/Error.c 2010-09-21 23:24:03.0 +0200
 @@ -257,7 +257,7 @@
  */
 Cardinal i = *num_params;
 String par[10];
 -   if (i  10) i = 10;
 +   if (i  9) i = 9;
 (void) memmove((char*)par, (char*)params, i * sizeof(String) );
 bzero( par[i], (10-i) * sizeof(String) );
 (void) fprintf (stderr, %s%s,
 @@ -292,7 +292,7 @@
  */
 Cardinal i = *num_params;
 String par[10];
 -   if (i  10) i = 10;
 +   if (i  9) i = 9;
 (void) memmove((char*)par, (char*)params, i * sizeof(String) );
 bzero( par[i], (10-i) * sizeof(String) );
 if (i != *num_params)
 ___
 xorg@lists.freedesktop.org: X.Org support
 Archives: http://lists.freedesktop.org/archives/xorg
 Info: http://lists.freedesktop.org/mailman/listinfo/xorg
 Your subscription address: barry.sc...@onelan.co.uk


 
___
xorg@lists.freedesktop.org: X.Org support
Archives: http://lists.freedesktop.org/archives/xorg
Info: http://lists.freedesktop.org/mailman/listinfo/xorg
Your subscription address: arch...@mail-archive.com


Re: patch: libXt-1.0.8 fix possible array overflow

2010-09-23 Thread Jeremy Huddleston
As I had mentioned earlier, there actually is no overflow because the code 
cannot reach that point if *num_params is 0.

On Sep 23, 2010, at 09:26, walter harms wrote:

 
 
 Barry Scott schrieb:
 On Wednesday 22 September 2010 08:18:21 walter harms wrote:
 hi List,
 the code checks the upperlimit to 10 while the upperlimit is actualy 9.
 
 You could use (sizeof( par )/sizeof( String ))-1 to make the code robust 
 aginst
 a change to the size of par.
 
 
 yep, i could use XtNumber(), personally i prefer
 
 i%=10;
 par=Xtmalloc(i*sizeof(String));
 
 but i wanted to fix the overflow first.
 
 the point i to not understand what do they copy the pointer at all ?
 they could yjust do the fprintf() and ready ..
 
 
 re,
 wh
 
 
 
 and change to printf below into a loop
 
 
 
 Barry
 
 re,
 wh
 
 
 --- libXt-1.0.8/src/Error.c.org 2010-09-21 23:23:00.0 +0200
 +++ libXt-1.0.8/src/Error.c 2010-09-21 23:24:03.0 +0200
 @@ -257,7 +257,7 @@
 */
Cardinal i = *num_params;
String par[10];
 -   if (i  10) i = 10;
 +   if (i  9) i = 9;
(void) memmove((char*)par, (char*)params, i * sizeof(String) );
bzero( par[i], (10-i) * sizeof(String) );
(void) fprintf (stderr, %s%s,
 @@ -292,7 +292,7 @@
 */
Cardinal i = *num_params;
String par[10];
 -   if (i  10) i = 10;
 +   if (i  9) i = 9;
(void) memmove((char*)par, (char*)params, i * sizeof(String) );
bzero( par[i], (10-i) * sizeof(String) );
if (i != *num_params)
 ___
 xorg@lists.freedesktop.org: X.Org support
 Archives: http://lists.freedesktop.org/archives/xorg
 Info: http://lists.freedesktop.org/mailman/listinfo/xorg
 Your subscription address: barry.sc...@onelan.co.uk
 
 
 
 ___
 xorg-de...@lists.x.org: X.Org development
 Archives: http://lists.x.org/archives/xorg-devel
 Info: http://lists.x.org/mailman/listinfo/xorg-devel

___
xorg@lists.freedesktop.org: X.Org support
Archives: http://lists.freedesktop.org/archives/xorg
Info: http://lists.freedesktop.org/mailman/listinfo/xorg
Your subscription address: arch...@mail-archive.com


Re: patch: libXt-1.0.8 fix possible array overflow

2010-09-23 Thread Pat Kane
In the original code if 'i' is equal to 10 then the line
   (void) memmove((char*)par, (char*)params, i * sizeof(String) );
moves ten things, which is okay.

The next line:
   bzero( par[i], (10-i) * sizeof(String) );
moves zero things to a bad address, which is probably okay,
but I bet some code checker would complain.

The code is very ugly.

Pat
---
___
xorg@lists.freedesktop.org: X.Org support
Archives: http://lists.freedesktop.org/archives/xorg
Info: http://lists.freedesktop.org/mailman/listinfo/xorg
Your subscription address: arch...@mail-archive.com


Re: patch: libXt-1.0.8 fix possible array overflow

2010-09-23 Thread walter harms


Pat Kane schrieb:
 In the original code if 'i' is equal to 10 then the line
(void) memmove((char*)par, (char*)params, i * sizeof(String) );
 moves ten things, which is okay.
 
 The next line:
bzero( par[i], (10-i) * sizeof(String) );
 moves zero things to a bad address, which is probably okay,
 but I bet some code checker would complain.
 
 The code is very ugly.
 

yes,
i can fix that too but i still feel that
i=10
bzero( par[i], (10-i) * sizeof(String) );

setting the limit to i=9 would fix that.

most maintainers prefer 1 fix 1 patch, i can send a revisited patch

re,
 wh
___
xorg@lists.freedesktop.org: X.Org support
Archives: http://lists.freedesktop.org/archives/xorg
Info: http://lists.freedesktop.org/mailman/listinfo/xorg
Your subscription address: arch...@mail-archive.com


Re: patch: libXt-1.0.8 fix possible array overflow

2010-09-23 Thread Pat Kane
  setting the limit to i=9 would fix that.

But then the line
(void) memmove((char*)par, (char*)params, i * sizeof(String) );
would be wrong since it would move nine instead of ten things.
___
xorg@lists.freedesktop.org: X.Org support
Archives: http://lists.freedesktop.org/archives/xorg
Info: http://lists.freedesktop.org/mailman/listinfo/xorg
Your subscription address: arch...@mail-archive.com


[ANNOUNCE] util-macros 1.10.1

2010-09-23 Thread Gaetan Nadon

Minor bug fix release for 7.6.

Alan Coopersmith (1):
  Sun's copyrights are now owned by Oracle

Gaetan Nadon (2):
  XORG_MANPAGE_SECTIONS: add substitution for apploaddir
  Version bump: 1.10.1

git tag: util-macros-1.10.1

http://xorg.freedesktop.org/archive/individual/util/util-macros-1.10.1.tar.bz2
MD5:  835e1637935fb390e0873f8ffc583726  util-macros-1.10.1.tar.bz2
SHA1: e0c7fcb952ac0638d28d89c4b1f3eb65219f34c8
util-macros-1.10.1.tar.bz2

http://xorg.freedesktop.org/archive/individual/util/util-macros-1.10.1.tar.gz
MD5:  775895851365e0fc194394c5d1ea6df8  util-macros-1.10.1.tar.gz
SHA1: 8d5921011db570ff39ac79c1fe2aa70875ec48c7
util-macros-1.10.1.tar.gz



signature.asc
Description: This is a digitally signed message part
___
xorg@lists.freedesktop.org: X.Org support
Archives: http://lists.freedesktop.org/archives/xorg
Info: http://lists.freedesktop.org/mailman/listinfo/xorg
Your subscription address: arch...@mail-archive.com

Re: GM45 HDMI output

2010-09-23 Thread Adam Jackson
On Thu, 2010-09-23 at 15:07 -0500, tsuraan wrote:

 So, there's no apparent HDMI output listed there.  This laptop is a
 hybrid graphics machine with an nVidia card; is it possible that the
 nVidia card owns the HDMI port and the Intel one just cannot see it,
 or do I have something misconfigured?

That is exactly the case.  On hybrid graphics machines with Intel GPUs,
the only digital output that the Intel chip can touch is LVDS.  DVI,
HDMI, and DisplayPort are on the discrete GPU only.

- ajax


signature.asc
Description: This is a digitally signed message part
___
xorg@lists.freedesktop.org: X.Org support
Archives: http://lists.freedesktop.org/archives/xorg
Info: http://lists.freedesktop.org/mailman/listinfo/xorg
Your subscription address: arch...@mail-archive.com

Re: Create a *real* top level window

2010-09-23 Thread The Rasterman
On Thu, 23 Sep 2010 18:19:16 +0300 Timo Juhani Lindfors timo.lindf...@iki.fi
said:

 Carsten Haitzler (The Rasterman) ras...@rasterman.com writes:
  luck. in the x11 world access gets flattened. the user is pretty much king.
 
 That's the impression I've unfortunately got too.
 
  my suggestions is to stand back and totally rethink what you are
  trying to do.
 
 I have several different use cases but mainly I'm interested in
 improving the common usage pattern: users run web browser and sudo
 under the same X server. If an attacker can run arbitrary code due to
 a bug in the web browser they can easily wait for the user to invoke
 sudo and then escalate to root.
 
 As a pet project I've been planning a sudo wrapper that provides
 trusted path for acknowledging each command. You can read the details
 at
 
 http://lindi.iki.fi/lindi/darcs/sido/README
 
 but the project is currently stuck due to challenges with X.
 
  logged in user is king. you'd have to modify the xserver itself to have
  such a separation and provide a back-channel that can only be accessed by
  root to implement what you want. reality otherwise is that any x client can
  kill off
 
 I think I have explored most of these options:
 
 1) as a back-channel I use
 /dev/input/by-path/platform-i8042-serio-0-event-kbd for input and a
 separate virtual console for output. The drawback here is that drivers
 are buggy and can crash the system on vt switch..
 
 2) normal users could run all their programs under vnc4server and when
 they login I would just run fullscreen xvnc4viewer as a trusted
 user. This is easy but causes extra slowdown. I did not research this
 further since I wanted a solution that'd be usable by normal desktop
 users.
 
 3) I looked at XACE. It looks that it might be possible to write an
 extension that'd give special powers to clients that have
 authenticated using a specific magic cookie. I am not sure if this is true.
 
 4) I have looked at selinux extension. It looks like it could work but
 the papers mention that a modified twm is needed, I have not found the
 source of that yet and I am not familiar with selinux:
 
 Here's a screen shot of a hacked twm that displays this property in
 place of the usual window title:
 http://people.freedesktop.org/~ewalsh/twm-demo.png;
 
 -- http://www.nsa.gov/research/selinux/list-archive/0611/thread_body83.shtml
 
 5) Finally I have looked at KMS in the hope that it could provide a
 graphical back-channel but have not succeeded yet here either.

hmm well i think possibly the best bet is to flip it upside down here. run
untrusted clients - like your borwser example, through some mechanism like a
nested xserver (rootless). xpra may help here. it will give a performance hit
for the untrusted client. it will also heavily limit how it can interact with
the rest of the users trusted desktop, but this is just what you want. you
can pretty much lock down all access at this server level and only allow in and
out what is deemed harmless. browser can run as another untrusted UID that
connects only to this nested x, and the nested x then is your barrier. make
sure it has no holes as it has full x access to the trusted display.

-- 
- Codito, ergo sum - I code, therefore I am --
The Rasterman (Carsten Haitzler)ras...@rasterman.com

___
xorg@lists.freedesktop.org: X.Org support
Archives: http://lists.freedesktop.org/archives/xorg
Info: http://lists.freedesktop.org/mailman/listinfo/xorg
Your subscription address: arch...@mail-archive.com


[ANNOUNCE] xauth 1.0.5

2010-09-23 Thread Alan Coopersmith
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

The xauth program is used to edit and display the authorization
information used in connecting to the X server.

This minor maintenance release fixes a couple bugs and includes the usual
recent build improvements/janitorial cleanups.

Alan Coopersmith (4):
  Bug 7051: xauth says creating new authority file even though it does not
  config: Remove unnecessary calls from configure.ac
  config: upgrade to util-macros 1.8 for additional man page support
  xauth 1.0.5

Gaetan Nadon (6):
  .gitignore: use common defaults with custom section # 24239
  Makefile.am: ChangeLog not required: EXTRA_DIST or *CLEANFILES #24432
  Deploy the new XORG_DEFAULT_OPTIONS #24242
  INSTALL, NEWS, README or AUTHORS files are missing/incorrect #24206
  Makefile.am: add ChangeLog and INSTALL on MAINTAINERCLEANFILES
  config: update AC_PREREQ statement to 2.60

Jeremy Huddleston (3):
  This is not a GNU project, so declare it foreign.
  launchd: Properly support launchd sockets in xauth
  Fix build failure resulting from previous commit on systems without 
strlcpy

git tag: xauth-1.0.5

http://xorg.freedesktop.org/archive/individual/app/xauth-1.0.5.tar.bz2
MD5:  46fc44e5e947d3720f3be5054044ff0e
SHA1: 6d94b5822e8ce08630a8ff510230246d5ed45290

http://xorg.freedesktop.org/archive/individual/app/xauth-1.0.5.tar.gz
MD5:  3919aeb4f304240a5fd40e6704672dec
SHA1: 5e7e978f79352069062b51138a4a2977ffa701bf


- --
-Alan Coopersmith-alan.coopersm...@oracle.com
 Oracle Solaris Platform Engineering: X Window System

-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.9 (SunOS)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkyb+IYACgkQovueCB8tEw5j6QCfUhvd6t5x87zblWfkmEjj3ad6
WxkAnAjtJ4fHy1QOKD/wUaATQm4I06ML
=Pp9v
-END PGP SIGNATURE-
___
xorg@lists.freedesktop.org: X.Org support
Archives: http://lists.freedesktop.org/archives/xorg
Info: http://lists.freedesktop.org/mailman/listinfo/xorg
Your subscription address: arch...@mail-archive.com


Re: GM45 HDMI output

2010-09-23 Thread tsuraan
 That is exactly the case.  On hybrid graphics machines with Intel GPUs,
 the only digital output that the Intel chip can touch is LVDS.  DVI,
 HDMI, and DisplayPort are on the discrete GPU only.

Does randr have any way to use multiple cards at once?  Would it be
possible for me to use my Intel card for the LVDS and have the
nVidia-controlled HDMI functional in the same X session, with xrandr
controlling the mirroring/relative positions of the two displays?
___
xorg@lists.freedesktop.org: X.Org support
Archives: http://lists.freedesktop.org/archives/xorg
Info: http://lists.freedesktop.org/mailman/listinfo/xorg
Your subscription address: arch...@mail-archive.com


Re: Widescreen Monitor config Problem

2010-09-23 Thread Graeme Gill

Scott Ballantyne wrote:

I have a LG FLATRON W2253VP widescreen monitor. No matter how I run X,
the monitor goes blank, enters power saving mode, and I must reboot to
reactivate the monitor.


This could be completely unrelated, but I notice that I get similar
symptoms if I try and run any of the recent Linux releases. I've
got an Intel graphics chip in the system, and the magic workaround
seems to be to use the nomodeset boot option.
(One hopes that this bug has been fixed upstream!)

Graeme Gill.
___
xorg@lists.freedesktop.org: X.Org support
Archives: http://lists.freedesktop.org/archives/xorg
Info: http://lists.freedesktop.org/mailman/listinfo/xorg
Your subscription address: arch...@mail-archive.com


[ANNOUNCE] xclock 1.0.5

2010-09-23 Thread Alan Coopersmith
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

This minor maintenance release of the classic non-shaped window clock fixes
a crash on startup on 64-bit architectures and includes the usual set of
recent build improvements/janitorial cleanups.

Alan Coopersmith (5):
  Update Sun license notices to current X.Org standard form
  config: upgrade to util-macros 1.8 for additional man page support
  Xmu functions are called directly, so include it in PKG_CHECK_MODULES
  Sun's copyrights now belong to Oracle
  xclock 1.0.5

David Coppa (1):
  Fix a crash on sparc64.

Gaetan Nadon (7):
  .gitignore: use common defaults with custom section # 24239
  Makefile.am: ChangeLog not required: EXTRA_DIST or *CLEANFILES #24432
  Deploy the new XORG_DEFAULT_OPTIONS #24242
  INSTALL, NEWS, README or AUTHORS files are missing/incorrect #24206
  Makefile.am: add ChangeLog and INSTALL on MAINTAINERCLEANFILES
  configure.ac: use backticks rather than $() for cmd subs
  config: update AC_PREREQ statement to 2.60

Jeremy Huddleston (1):
  Remove extraneous  reference to HAS_STRLCAT

Peter Hutterer (1):
  Add INSTALL to .gitignore. (#24157)

git tag: xclock-1.0.5

http://xorg.freedesktop.org/archive/individual/app/xclock-1.0.5.tar.bz2
MD5:  eaf124bbc9d13e1a12a29faaa2ed3612
SHA1: 1651ac8961c0aa287a6a7412ee5e6d3bfc3bb3e2

http://xorg.freedesktop.org/archive/individual/app/xclock-1.0.5.tar.gz
MD5:  3ccd96e25f99a8c667c00782af7d1c5e
SHA1: 0c8209b72cfd4b0662b80cf4450dab374d3ca6c3


- --
-Alan Coopersmith-alan.coopersm...@oracle.com
 Oracle Solaris Platform Engineering: X Window System

-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.9 (SunOS)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkycA0gACgkQovueCB8tEw6qswCffk9Tt/ARnq+h2E95FZkGlR3c
uYoAn24b8lmShsf7TWqeMpmDJhxh9cQf
=XKwD
-END PGP SIGNATURE-
___
xorg@lists.freedesktop.org: X.Org support
Archives: http://lists.freedesktop.org/archives/xorg
Info: http://lists.freedesktop.org/mailman/listinfo/xorg
Your subscription address: arch...@mail-archive.com


[ANNOUNCE] xcmsdb 1.0.3

2010-09-23 Thread Alan Coopersmith
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

xcmsdb is used to load, query, or remove Device Color Characterization
data stored in properties on the root window of the screen as
specified in section 7, Device Color Characterization, of the
X11 Inter-Client Communication Conventions Manual (ICCCM).

This minor maintenance release provides only corrections to the COPYING
notice and the usual round of recent build improvements  janitorial cleanups.

Alan Coopersmith (4):
  Add Open Group notice to COPYING for man page
  config: upgrade to util-macros 1.8 for additional man page support
  config: Remove unnecessary calls from configure.ac
  xcmsdb 1.0.3

Gaetan Nadon (6):
  .gitignore: use common defaults with custom section # 24239
  Makefile.am: ChangeLog not required: EXTRA_DIST or *CLEANFILES #24432
  INSTALL, NEWS, README or AUTHORS files are missing/incorrect #24206
  Makefile.am: add ChangeLog and INSTALL on MAINTAINERCLEANFILES
  COPYING: replace stub with actual copyright notice
  config: update AC_PREREQ statement to 2.60

git tag: xcmsdb-1.0.3

http://xorg.freedesktop.org/archive/individual/app/xcmsdb-1.0.3.tar.bz2
MD5:  a8f013229f7234d582e0ee2c89879e30
SHA1: 14df39b4d5518f551302c210131dcc5bac03f3ff

http://xorg.freedesktop.org/archive/individual/app/xcmsdb-1.0.3.tar.gz
MD5:  543d9e18c887eae1d98060249a8521e0
SHA1: 318cb9c5248d9eb5220ce2ba3905211e2bc9b5cf


- --
-Alan Coopersmith-alan.coopersm...@oracle.com
 Oracle Solaris Platform Engineering: X Window System

-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.9 (SunOS)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkycCdIACgkQovueCB8tEw4H3gCfVfCU8zIop15G6LqGJq50O2Tl
zWwAoJQaytsiRx7+qnmSNVYxqF0tM9QP
=IwBz
-END PGP SIGNATURE-
___
xorg@lists.freedesktop.org: X.Org support
Archives: http://lists.freedesktop.org/archives/xorg
Info: http://lists.freedesktop.org/mailman/listinfo/xorg
Your subscription address: arch...@mail-archive.com


[ANNOUNCE] xconsole 1.0.4

2010-09-23 Thread Alan Coopersmith
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

xconsole displays in a X11 window the messages which are usually sent
to /dev/console

This minor maintenance release includes several years of build improvements
and janitorial fixes, including support for building without libXaw8 macros.

Alan Coopersmith (7):
  Remove errant #error I_PUSH from SVR4 code path
  Add README with pointers to mailing lists, bugzilla,  git
  config: upgrade to util-macros 1.8 for additional man page support
  Xmu functions are called directly, so include it in PKG_CHECK_MODULES
  Fill in COPYING file with copyright notices from source code
  config: Remove unnecessary calls from configure.ac
  xconsole 1.0.4

Gaetan Nadon (7):
  .gitignore: use common defaults with custom section # 24239
  Deploy the new XORG_DEFAULT_OPTIONS #24242
  INSTALL, NEWS, README or AUTHORS files are missing/incorrect #24206
  Makefile.am: add ChangeLog and INSTALL on MAINTAINERCLEANFILES
  configure.ac: use backticks rather than $() for cmd subs
  config: move CWARNFLAGS from configure.ac to Makefile.am
  config: update AC_PREREQ statement to 2.60

James Cloos (2):
  Add *~ to .gitignore to skip patch/emacs droppings
  xaw8 is gone, use xaw7

Jeremy Huddleston (1):
  Build fix for file systems that are not case sensitive

Julien Cristau (3):
  Fix build with builddir != srcdir
  $(builddir) is the current directory
  Fix header inclusion for openpty()

Matthieu Herrb (1):
  Prevent inclusion of stropts.h on Linux.

Paulo Cesar Pereira de Andrade (1):
  Ansification and compile warning fixes.

git tag: xconsole-1.0.4

http://xorg.freedesktop.org/archive/individual/app/xconsole-1.0.4.tar.bz2
MD5:  8665c037032e5f6a3acd4b341749aa17
SHA1: 195299d4948ba4c62e961ddd0bd4572283244715

http://xorg.freedesktop.org/archive/individual/app/xconsole-1.0.4.tar.gz
MD5:  c617acec432901a3c1a2b23b022624cb
SHA1: d43837ceecc282b5c7e6d94e91123ee355ff1870


- --
-Alan Coopersmith-alan.coopersm...@oracle.com
 Oracle Solaris Platform Engineering: X Window System

-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.9 (SunOS)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkycDoMACgkQovueCB8tEw6psgCaAwWFQtjunjx0kvcW7PXjAako
BM8AnAlZxoClI5aRNeHmW8cgVA6ObQY0
=hnBc
-END PGP SIGNATURE-
___
xorg@lists.freedesktop.org: X.Org support
Archives: http://lists.freedesktop.org/archives/xorg
Info: http://lists.freedesktop.org/mailman/listinfo/xorg
Your subscription address: arch...@mail-archive.com


[ANNOUNCE] xcursorgen 1.0.4

2010-09-23 Thread Alan Coopersmith
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

xcursorgen prepares X11 cursor sets for use with libXcursor.

This minor maintenance release allows building with libpng 1.4  later,
and includes the usual round of recent build improvements  janitorial
cleanups.

Alan Coopersmith (2):
  config: Remove unnecessary calls from configure.ac
  xcursorgen 1.0.4

Cody Maloney (1):
  Upgraded to work with libpng14

Gaetan Nadon (6):
  Makefile.am: do not include autogen.sh in distribution #24183
  .gitignore: use common defaults with custom section # 24239
  Makefile.am: ChangeLog not required: EXTRA_DIST or *CLEANFILES #24432
  INSTALL, NEWS, README or AUTHORS files are missing/incorrect #24206
  Makefile.am: add ChangeLog and INSTALL on MAINTAINERCLEANFILES
  config: update AC_PREREQ statement to 2.60

Yaakov Selkowitz (2):
  Remove INSTALL from git
  Use AC_PROG_SED and MAN_SUBSTS in macros-1.8

git tag: xcursorgen-1.0.4

http://xorg.freedesktop.org/archive/individual/app/xcursorgen-1.0.4.tar.bz2
MD5:  731c39ea88217c12ddd37f8627d97f3f
SHA1: 244c180aae8cc07175b93f314d5bbbf24171658a

http://xorg.freedesktop.org/archive/individual/app/xcursorgen-1.0.4.tar.gz
MD5:  4935408cee5625939f3e5c111e6868ae
SHA1: 9823ad269d25dab923b7194883e5108b7d6fad71


- --
-Alan Coopersmith-alan.coopersm...@oracle.com
 Oracle Solaris Platform Engineering: X Window System

-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.9 (SunOS)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkycFLwACgkQovueCB8tEw6LKQCfXc0J2vDfjBH03X6H+C8r8DQl
YJ4An2e5kE8f6qFj5u4oW2IpzQoe856g
=l5wS
-END PGP SIGNATURE-
___
xorg@lists.freedesktop.org: X.Org support
Archives: http://lists.freedesktop.org/archives/xorg
Info: http://lists.freedesktop.org/mailman/listinfo/xorg
Your subscription address: arch...@mail-archive.com