Bug#801401: Workarounds for rootless Xorg

2015-10-22 Thread Lingzhu Xiang
Xorg without setuid is a good thing for security. But it's still possible to manage without systemd-logind. As outlined in http://hansdegoede.livejournal.com/14268.html, several privileges needed by xorg are moved to be managed in logind. Those privileges can be provided alternatively as follows:

Bug#801401: Workarounds for rootless Xorg

2015-10-22 Thread Christopher James Halse Rogers
On Fri, Oct 23, 2015 at 5:01 AM, Lingzhu Xiang wrote: * Privilege to drmSetMaster() If there is only one drm device no setup is needed. This is an incorrect understanding of what drmSetMaster() does. It is not setting a primary device, it's the process claiming the

Bug#801401: Workarounds for rootless Xorg

2015-10-22 Thread Lingzhu Xiang
On Thu, Oct 22, 2015 at 7:28 PM, Christopher James Halse Rogers wrote: >> * Privilege to drmSetMaster() >> >> If there is only one drm device no setup is needed. > > > This is an incorrect understanding of what drmSetMaster() does. It is not > setting a