Subject: Re: Bugfix and security hole with xdm in the X11R6 snapshot
To: Bernd Ernesti <netbsd@arresum.inka.de>
From: Jason Thorpe <thorpej@nas.nasa.gov>
List: amiga-x
Date: 09/10/1995 17:23:34
On Mon, 11 Sep 1995 00:36:39 +0200 (MET DST)
Bernd Ernesti <netbsd@arresum.inka.de> wrote:
> I am sorry, but there are some bug in the X11R6.08Sept95 distribution:
>
> 1. This bugs are for xdm which I normally don't use:
>
> - /usr/local/X11R6/lib/X11/xdm/Xscript needs an
> #!/bin/sh
> at the begining of it or xdm can't even start.
>
> - xdm is broken and has a SECURITY HOLE in it, that means that every
> one has root privileges !
> PLEASE use the new xdm in X11R6.08Sep95-xdm.tar.gz
>
> gzcat X11R6.08Sep95-xdm.tar.gz | (cd / ; tar --unlink -xfp -)
>
> - Xsetup, which is a script to execute some programms, e.g. xmodmap to
> change the keymap, needs an extra line in
> /usr/local/X11R6/lib/X11/xdm/xdm-config
> to use it:
>
> DisplayManager*setup: /usr/local/X11R6/lib/X11/xdm/Xsetup
>
> and /usr/local/X11R6/lib/X11/xdm/Xsetup look like this:
>
> #!/bin/sh
> xmodmap /usr/local/X11R6/lib/X11/german.xmodmaprc
>
> But don't forget to make this script executable:
>
> chmod 555 /usr/local/X11R6/lib/X11/xdm/Xsetup
>
> 2. Xcl and Xamiga24 doesn't come up in mono with the supplied xserverrc and
> Xscript.
> Please add an ' -dev /dev/grf0' after the '-mono' option in it
>
> Many thank to Blaz Zupan <blaz.zupan@uni-mb.si> for sending me a bugreport
> about this problems.
>
> Bernd Ernesti
--------------------------------------------------------------------------
Jason R. Thorpe thorpej@nas.nasa.gov
NASA Ames Research Center Home: 408.866.1912
NAS: M/S 258-6 Work: 415.604.0935
Moffett Field, CA 94035 Pager: 415.428.6939