Date: Sun, 30 Apr 2000 13:58:30 -0400 (EDT) From: Chuck Robey <chuckr@picnic.mat.net> To: Kris Kennaway <kris@FreeBSD.org> Cc: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: ports/x11/XFree86-4 Makefile Message-ID: <Pine.BSF.4.21.0004301357250.7061-100000@picnic.mat.net> In-Reply-To: <Pine.BSF.4.21.0004300126300.13182-100000@freefall.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 30 Apr 2000, Kris Kennaway wrote: > On Sun, 30 Apr 2000, Kris Kennaway wrote: > > > Modified files: > > x11/XFree86-4 Makefile > > Log: > > Mark FORBIDDEN due to the root hole in the X server reported on Bugtraq. > > I've tried *multiple* times to talk to an XFree86 developer about the > > problem, but they haven't deigned to respond to me. > > Probably the best thing we could do is to add back Xwrapper support to the > port - for some reason which can only be described (a priori) as idiotic, > the XFree86 guys decided to remove Xwrapper (which is what prevents > XFree86-3.x from being vulnerable to this hole) and make the X server > itself setuid root again. I think that's going to have to be done; we CAN'T be without an X11 port, too many things depend directly on X. We can shout and howl, and do local FreeBSD fixes, but X is too important to remove, don't you see? > > Kris > > ---- > In God we Trust -- all others must submit an X.509 certificate. > -- Charles Forsythe <forsythe@alum.mit.edu> > > > ---------------------------------------------------------------------------- Chuck Robey | Interests include C & Java programming, FreeBSD, chuckr@picnic.mat.net | electronics, communications, and signal processing. New Year's Resolution: I will not sphroxify gullible people into looking up fictitious words in the dictionary. ---------------------------------------------------------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0004301357250.7061-100000>