Subject: Re: Bugfix and security hole with xdm in the X11R6 snapshot
To: Bernd Ernesti <netbsd@arresum.inka.de>
From: Jason Thorpe <thorpej@nas.nasa.gov>
List: amiga
Date: 09/10/1995 17:23:34
On Mon, 11 Sep 1995 00:36:39 +0200 (MET DST) 
 Bernd Ernesti <netbsd@arresum.inka.de> wrote:

 > I am sorry, but there are some bug in the X11R6.08Sept95 distribution:
 > 
 > 1. This bugs are for xdm which I normally don't use:
 > 
 >     - /usr/local/X11R6/lib/X11/xdm/Xscript needs an
 >        #!/bin/sh
 >       at the begining of it or xdm can't even start.
 > 
 >     - xdm is broken and has a SECURITY HOLE in it, that means that every
 >       one has root privileges !
 >       PLEASE use the new xdm in X11R6.08Sep95-xdm.tar.gz
 > 
 >       gzcat X11R6.08Sep95-xdm.tar.gz | (cd / ; tar --unlink -xfp -)
 > 
 >     - Xsetup, which is a script to execute some programms, e.g. xmodmap to
 >       change the keymap, needs an extra line in
 >       /usr/local/X11R6/lib/X11/xdm/xdm-config
 >       to use it:
 > 
 >       DisplayManager*setup:              /usr/local/X11R6/lib/X11/xdm/Xsetup
 > 
 >      and /usr/local/X11R6/lib/X11/xdm/Xsetup look like this:
 > 
 >      #!/bin/sh
 >      xmodmap /usr/local/X11R6/lib/X11/german.xmodmaprc
 > 
 >     But don't forget to make this script executable:
 > 
 >     chmod 555 /usr/local/X11R6/lib/X11/xdm/Xsetup
 > 
 > 2. Xcl and Xamiga24 doesn't come up in mono with the supplied xserverrc and
 >    Xscript.
 >    Please add an ' -dev /dev/grf0' after the '-mono' option in it
 > 
 > Many thank to Blaz Zupan <blaz.zupan@uni-mb.si> for sending me a bugreport
 > about this problems.
 > 
 > Bernd Ernesti

--------------------------------------------------------------------------
Jason R. Thorpe                                       thorpej@nas.nasa.gov
NASA Ames Research Center                               Home: 408.866.1912
NAS: M/S 258-6                                          Work: 415.604.0935
Moffett Field, CA 94035                                Pager: 415.428.6939