Bug#661627: init script x11-common creates directories in insecure manners

2012-03-02 Thread Julien Cristau
On Tue, Feb 28, 2012 at 18:31:02 +0100, vladz wrote: > The init script "x11-common" creates directories "/tmp/.X11-unix" and > "/tmp/.ICE-unix" in insecure manners. > I've now pushed a change to git://git.debian.org/git/pkg-xorg/debian/xorg.git that should hopefully fix this. The new version of

xorg: Changes to 'debian-unstable'

2012-03-02 Thread Julien Cristau
debian/changelog | 11 + debian/x11-common.init | 90 - 2 files changed, 71 insertions(+), 30 deletions(-) New commits: commit 0418b8dd8fa6940285f7f6b71302655942c15fb7 Author: Julien Cristau Date: Fri Mar 2 21:57:56 2012 +0100

xserver-xorg-input-synaptics: Changes to 'ubuntu'

2012-03-02 Thread Chase Douglas
Rebased ref, commits from common ancestor: commit a337885f15b2aa5cd243f31db730b2e4a5161670 Author: Chase Douglas Date: Fri Mar 2 10:00:47 2012 -0800 Disable ClickPad support when there is no physical right button (LP: #941046) * Disable ClickPad support when there is no physical r

xserver-xorg-input-synaptics: Changes to 'ubuntu'

2012-03-02 Thread Chase Douglas
debian/changelog | 14 + debian/patches/129_clickpad.patch | 346 +- 2 files changed, 207 insertions(+), 153 deletions(-) New commits: commit d26ff13961b5b1de1372515784a8115be60316ca Author: Chase Douglas Date: Fri Mar 2 10:00:47 2012 -08

Bug#555648: x11-xserver-utils: Same problem with DELL 2007FP

2012-03-02 Thread Oleg Kostyuk
Unfortunately, I'm too far from C/C++ and Xorg. Otherwise, I would did this without your notice. -- Sincerely yours, Oleg Kostyuk (CUB-UANIC) -- To UNSUBSCRIBE, email to debian-x-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: h

Bug#661627: Avoid /tmp ?

2012-03-02 Thread Julien Cristau
On Fri, Mar 2, 2012 at 20:20:11 +0100, vladz wrote: > On Fri, Mar 02, 2012 at 02:29:33PM +0100, Julien Cristau wrote: > > I'm not convinced the chown can be removed. And 'mkdir -m 1777 foo' is > > not any more atomic than 'mkdir foo && chmod 1777 foo'. > > The command "mkdir -m" calls the mkd

Bug#661627: Avoid /tmp ?

2012-03-02 Thread vladz
On Fri, Mar 02, 2012 at 02:29:33PM +0100, Julien Cristau wrote: > I'm not convinced the chown can be removed. And 'mkdir -m 1777 foo' is > not any more atomic than 'mkdir foo && chmod 1777 foo'. The command "mkdir -m" calls the mkdir() syscall, and its second argument seems to be the mode.

Bug#615020: xdm: ConsoleKit support

2012-03-02 Thread Julien Cristau
On Fri, Mar 2, 2012 at 13:42:03 -0500, Mason Loring Bliss wrote: > Package: xdm > Version: 1:1.1.11-1 > Followup-For: Bug #615020 > > Dear Maintainer, > > As XDM doesn't support consolekit directly, users must take a couple > potentially non-obvious steps to get NetworkManager and XFCE4 Power >

Bug#555648: x11-xserver-utils: Same problem with DELL 2007FP

2012-03-02 Thread Julien Cristau
On Fri, Mar 2, 2012 at 19:46:05 +0200, Oleg Kostyuk wrote: > Please, fix this! Send a patch? Cheers, Julien signature.asc Description: Digital signature

Bug#615020: xdm: ConsoleKit support

2012-03-02 Thread Mason Loring Bliss
Package: xdm Version: 1:1.1.11-1 Followup-For: Bug #615020 Dear Maintainer, As XDM doesn't support consolekit directly, users must take a couple potentially non-obvious steps to get NetworkManager and XFCE4 Power Manager (and likely similar systems) to run. Specifically, someone using XDM must re

Bug#555648: x11-xserver-utils: Same problem with DELL 2007FP

2012-03-02 Thread Oleg Kostyuk
Package: x11-xserver-utils Version: 7.5+3 Severity: normal I have exactly same problem, as described by Edward Welbourne in message #5. Also, I did check of dimension and resolution, as proposed by Gene Cash in message #15. Before screen rotating: % xdpyinfo | grep -i dimen\|res dimensions:

Processed: seems to be gnome related instead of plain X

2012-03-02 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > reassign 657440 gnome-settings-daemon Bug #657440 [xkb-data] xkb-data: cannot switch between two kb layout in gnome Bug reassigned from package 'xkb-data' to 'gnome-settings-daemon'. Bug No longer marked as found in versions xkeyboard-config/2.5-1

Processed: bug 658413 is forwarded to https://bugs.freedesktop.org/show_bug.cgi?id=46903

2012-03-02 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > forwarded 658413 https://bugs.freedesktop.org/show_bug.cgi?id=46903 Bug #658413 [x11-xkb-utils] x11-xkb-utils: Mention xkeyboard-config(7) in setxkbmap(1) Changed Bug forwarded-to-address to 'https://bugs.freedesktop.org/show_bug.cgi?id=46903' f

Processed: bug 658413 is forwarded to http://lists.x.org/archives/xorg-devel/2012-February/028989.html

2012-03-02 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > forwarded 658413 > http://lists.x.org/archives/xorg-devel/2012-February/028989.html Bug #658413 [x11-xkb-utils] x11-xkb-utils: Mention xkeyboard-config(7) in setxkbmap(1) Set Bug forwarded-to-address to 'http://lists.x.org/archives/xorg-devel/2

Bug#661627: Avoid /tmp ?

2012-03-02 Thread Bernhard R. Link
* Bernhard R. Link [120302 15:56]: > And I think if there is something else, it might make sense to > try to move it away again and try to create it again. How about the following: # create a directory in /tmp. # assumes /tmp has a sticky bit set (or is only writeable by root) create_dir() { e

Re: Bug#661627: Avoid /tmp ?

2012-03-02 Thread Bernhard R. Link
* Julien Cristau [120302 14:31]: > > I think the obsolete chown command should be removed (as said Tim), and > > also the chmod should by replaced by a single atomic operation (using > > "mkdir -m"). Those two things will avoid usages of dangerous commands > > and then, reduce TOCTTOU risks. > >

Processed: your mail

2012-03-02 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > found 642433 2:1.11.99.902-1 Bug #642433 {Done: Cyril Brulebois } [xserver-xorg-core] xserver-xorg-core: crashes on pressing random keys on the keyboard while screen locked Did not alter found versions and reopened. > found 642433 2:1.11.3.901-2

Bug#608365: xserver-xorg-core: attached patch should fix the crash on close

2012-03-02 Thread Michal Suchanek
Package: xserver-xorg-core Severity: normal Hello Attaching a patch which fixed the issue shortly after it was introduced. It does not seem applied upstream so either there is a different fix or this is still broken. My X server crashes way earlier so can't tell. Thanks Michal Index: xserver/

Bug#661627: Avoid /tmp ?

2012-03-02 Thread Julien Cristau
On Fri, Mar 2, 2012 at 12:44:23 +0100, vladz wrote: > > Julien, thank you for putting me back in CC. ;) > > On Thu, Mar 01, 2012 at 09:48:47PM +0100, Julien Cristau wrote: > > On Thu, Mar 1, 2012 at 12:39:41 -0800, Tim wrote: > > > > > Note that the "chown root:root $SOCKET_DIR" also seems red

Bug#661627: Avoid /tmp ?

2012-03-02 Thread vladz
Oops, I forgot "then" in my last post: - if [ ! -O $SOCKET_DIR ]; + if [ ! -O $SOCKET_DIR ]; then I have attached a patch. Hope this helps. --- a/debian/x11-common.init 2010-09-04 19:26:52.0 +0200 +++ b/debian/x11-common.init 2012-03-02 13:37:29.0 +0100 @@ -26,16 +26,26 @@ f

Bug#661627: Avoid /tmp ?

2012-03-02 Thread vladz
Julien, thank you for putting me back in CC. ;) On Thu, Mar 01, 2012 at 09:48:47PM +0100, Julien Cristau wrote: > On Thu, Mar 1, 2012 at 12:39:41 -0800, Tim wrote: > > > > Note that the "chown root:root $SOCKET_DIR" also seems redundant to me > > > > (if we didn't already own it, we would have b