xconsole is privsep now too

Contributed by jose on 2003-02-23 from the more-security-as-we-near-a-code-freeze dept.

List:     openbsd-tech
Subject:  xconsole is privsep now too
From:     Theo de Raadt

Date:     2003-02-21 21:33:22

matthieu has changed xconsole(1) so that is also now privsep, and now
the main process does not run as root.  It would be nice if new
snapshots (starting tonight) are tested carefully, to see if any
glitches show up in our X11 privsep and xconsole privsep changes.

As I see it, this now removes almost all the major worries I have had
about the X server traditionally... it is still a large server sitting
on port 6000+n, but not as root, this helps a lot..

Thannks.

Link: (original message)

Actually, we're very near a tree freeze, so it will be a big help to get as many people testing as many architecture snapshots and builds as possible. Lots of things changed for the upcoming 3.3 release: lots of PF changes, ProPolice, various exec protection options, threads, BIND9 was imported, privsep X and now xconsole. Please, download, build, use and report bugs. A few have been found but many more lurk.

(Comments are closed)

Comments

By schubert () on 2003-02-23 05:45

although you'll only notice the privsep working with xconsole if you drop to console and do a ps output while your X is at the xdm login screen. You'll see xconsole running as _x11 and root. one with [priv] one without.
By Anonymous Coward () on 2003-02-23 13:56

Is it listening on TCP/6000 by default?

I forgot where to set the nolisten tcp directive, where was it, ~/.xinitrc?

Or isn't it listening on 6000 any more by default?

Latest Articles

Tue, Sep 10
- 05:39 Game of Trees 0.103 released (0)
Sun, Aug 25
- 09:13 rpki-client 9.2 released (0)
Sat, Aug 24
- 11:46 No unmodified files remain from original import of OpenBSD (0)
Wed, Aug 14
- 20:39 Game of Trees 0.102 released! (0)
- 05:31 The BSDCan 2024 Playlist is now complete (0)
Thu, Aug 08
- 09:26 OpenBSD -current moves to 7.6-beta (1)
Mon, Jul 29
- 12:27 Possible future vmm(4)/vmd(8) on arm64 (1)
Sat, Jul 27
- 11:05 UDP parallel input committed to -current (0)
Wed, Jul 24
- 05:28 Incoming: UDP parallel input (1)

Credits

Copyright © 2004-2008 Daniel Hartmeier. All rights reserved. Articles and comments are copyright their respective authors, submission implies license to publish on this web site. Contents of the archive prior to April 2nd 2004 as well as images and HTML templates were copied from the fabulous original deadly.org with Jose's and Jim's kind permission. This journal runs as CGI with httpd(8) on OpenBSD, the source code is BSD licensed. undeadly \Un*dead"ly\, a. Not subject to death; immortal. [Obs.]