"Due to now living in a KMS-enabled world, at least on the Intel and ATI side (the NVIDIA side is still slowly but surely coming via Nouveau), it's rather easy to get the X Server running without any special rights. Intel's Jesse Barnes explains on the X.Org mailing list that only a small patch is needed for the X Server and then a trivial one to the Direct Rendering Manager in the kernel."
Post a Comment
Member since:
2008-07-01
Member since:2007-05-28
Member since:
2006-06-03
Member since:2007-01-24
Member since:
2005-09-23
Member since:2005-09-23
Member since:2006-02-15
Member since:2005-09-15
Member since:
2005-07-06
I've heard lots of complaints about slipping release dates, features getting dropped from releases, etc. But I've got to say, the pace of change in X11 these days is highly impressive. I'm always looking forward to what's coming next ...
I was aware that e.g. OpenBSD was able to run X11 as non-root a while ago. Doubtless this new development is a more comprehensive solution but I do wonder how *BSD supported running X as a normal user process in the past ... set the mode and then permanently drop privileges, perhaps? Anybody know?
I should probably just go look it up but ... this is the lazyweb, right?
Member since:2006-02-05
OpenBSD did it by using privilege separation. Ihey have a modified X server which drops privileges after it does the things it needs to be root to do. It may also be split into a small, auditable privileged program which does rootish things on behalf of the larger, unprivileged X server (like they do with SSH and some other daemons).
To me, this seems preferable to moving modesetting code into the kernel, but there may be other non-security implications to that which pushed the Linux folks in that direction.
In the past, they also had a special driver (xf86) to allow access to certain ports and memory ranges on the video card as non-root. I don't know if they still use this, though. I haven't run X on an OpenBSD box in years.
Edited 2009-07-06 17:49 UTC