On Wed, Jan 8, 2014 at 3:18 PM, Kevin Fenzi kevin@scrye.com wrote:
I could have sworn there was a more recent discussion of this, but there is at least this thread from 2009:
https://lists.fedoraproject.org/pipermail/devel/2009-August/036086.html
Also:
http://lwn.net/Articles/546537/
(discussion about the last revoke() discussion on linux-kernel).
*sigh*. I'm obviously being unclear.
I am *not* proposing anything related to what uid the X server runs under. I'm proposing that, when a nonroot user types "Xorg" at the terminal, they don't cause a root-privileged X server to appear.
Since I doubt that many people run Xorg directly (unless they're up to no good), this should have no observable effect.
--Andy