Date: Tue, 17 Apr 2007 22:31:01 +0100 From: Florent Thoumie <flz@FreeBSD.org> To: Stefan `Sec` Zehl <sec@42.org> Cc: freebsd-x11@FreeBSD.org Subject: Re: ports/109497: x11-servers/xorg-fontserver rc.d/xfs.sh script missing "-user" Message-ID: <46253C95.3030808@FreeBSD.org> In-Reply-To: <20070417201548.GB44061@ice.42.org> References: <200704161141.l3GBfrcY049525@freefall.freebsd.org> <20070417201548.GB44061@ice.42.org>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enigB3DD81EFB2DFC5EBE7B42700 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Stefan `Sec` Zehl wrote: > Hi, >=20 > On Mon, Apr 16, 2007 at 11:41 +0000, Florent Thoumie wrote: >> Synopsis: x11-servers/xorg-fontserver rc.d/xfs.sh script missing "-use= r" >> >> State-Changed-From-To: open->closed >> State-Changed-By: flz >> State-Changed-When: Mon Apr 16 11:40:38 UTC 2007 >> State-Changed-Why:=20 >> I just checked and other OS'es seem to run it as root as well. >> >> If this is a real concern to you, just set xfs_flags=3D"-user nobody" = in >> /etc/rc.conf. I think this is what you're looking for. >=20 > Please note that if you set "xfs_user=3D" to something, the default > rc.subr will already try to do something with it, and (silently) fail t= o > start xfs at all. I do think fixing this would be more user friendly --= > besides, its only a two-line patch anyway, and it doesn't even change > the default of running as root. >=20 > But if think it's important to refuse this change, I can certainly live= > without that patch. This is not what I said, please re-read my message. --=20 Florent Thoumie flz@FreeBSD.org FreeBSD Committer --------------enigB3DD81EFB2DFC5EBE7B42700 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (FreeBSD) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGJTyaMxEkbVFH3PQRCtfVAJkBj88yO341RuKCaM6+UGrOKaYyngCeIe9l WZPE7hPXrnEloCrIONfko3w= =VLyb -----END PGP SIGNATURE----- --------------enigB3DD81EFB2DFC5EBE7B42700--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?46253C95.3030808>