Skip to content
  • Hans de Goede's avatar
    Xorg: Add a suid root wrapper · e7b84ca4
    Hans de Goede authored
    With the recent systemd-logind changes it is possible to install the Xorg
    binary without suid root rights and still have everything working as it
    should *if* the user only has cards which are supported by kms.
    
    This commit adds a little suid root wrapper, which is a bit weird, first we
    strip the suid-root bit of the Xorg binary, and then we add a wrapper ?
    
    The function of this wrapper is to see if a system still needs root-rights,
    if it does not (it supports kms and the kms drivers are properly loaded),
    then it will immediately drop all elevated rights before executing the real
    Xorg binary. If it finds (some) cards which don't support kms, or no cards
    at all, then it will execute the Xorg server with elevated rights so that
    ie the nvidia binary driver and the vesa driver can keep working normally.
    
    To make it possible for security concious users who don't need the root
    rights to completely remove the wrapper, Xorg is started in a 3 step process
    when the wrapper is enabled du...
    e7b84ca4