From mboxrd@z Thu Jan  1 00:00:00 1970
From: "pelzflorian (Florian Pelz)" <pelzflorian@pelzflorian.de>
Subject: Re: kmscon not working on MacBook
Date: Thu, 26 Mar 2020 17:53:11 +0100
Message-ID: <20200326165311.t6mvztyk2y4t5lo4@pelzflorian.localdomain>
References: <87pne3d5t6.fsf@gnu.org>
 <60bd323b399bc4fafefc74d7fa84c0db@dismail.de>
 <20200308120400.bdrkyo653fhbtkml@pelzflorian.localdomain>
 <87a74q8spt.fsf_-_@gnu.org>
 <20200309074358.jly3mtrevwm75wip@pelzflorian.localdomain>
 <87h7yx1npi.fsf@gnu.org>
 <20200311071437.6ykyxcqdrgjtagrq@pelzflorian.localdomain>
 <20200320084850.klhoxexhnamkoelg@pelzflorian.localdomain>
 <20200325230018.h4f4k5cgmkivyo3h@pelzflorian.localdomain>
 <20200326022605.GA21552@LionPure>
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="j5mxpcugi6ictnsg"
Content-Transfer-Encoding: 7bit
Return-path: <guix-devel-bounces+gcggd-guix-devel=m.gmane-mx.org@gnu.org>
Received: from eggs.gnu.org ([2001:470:142:3::10]:36575)
 by lists.gnu.org with esmtp (Exim 4.90_1)
 (envelope-from <pelzflorian@pelzflorian.de>) id 1jHVkr-0007jE-CJ
 for guix-devel@gnu.org; Thu, 26 Mar 2020 12:53:18 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <pelzflorian@pelzflorian.de>) id 1jHVkp-0006dp-SA
 for guix-devel@gnu.org; Thu, 26 Mar 2020 12:53:17 -0400
Content-Disposition: inline
In-Reply-To: <20200326022605.GA21552@LionPure>
List-Id: "Development of GNU Guix and the GNU System distribution."
 <guix-devel.gnu.org>
List-Unsubscribe: <https://lists.gnu.org/mailman/options/guix-devel>,
 <mailto:guix-devel-request@gnu.org?subject=unsubscribe>
List-Archive: <https://lists.gnu.org/archive/html/guix-devel>
List-Post: <mailto:guix-devel@gnu.org>
List-Help: <mailto:guix-devel-request@gnu.org?subject=help>
List-Subscribe: <https://lists.gnu.org/mailman/listinfo/guix-devel>,
 <mailto:guix-devel-request@gnu.org?subject=subscribe>
Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane-mx.org@gnu.org
Sender: "Guix-devel"
 <guix-devel-bounces+gcggd-guix-devel=m.gmane-mx.org@gnu.org>
To: Bengt Richter <bokr@bokr.com>
Cc: guix-devel@gnu.org, jbranso@dismail.de


--j5mxpcugi6ictnsg
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Mar 26, 2020 at 03:26:05AM +0100, Bengt Richter wrote:
> On +2020-03-26 00:00:18 +0100, pelzflorian (Florian Pelz) wrote:
> > on one of my computers uvesafb can only be used after =E2=80=9Echmmod=
 o+rw
> > /dev/fb0=E2=80=9C which is a security issue, I suppose.
> >
>=20
> Are you a member of the video group?

Indeed the issue was that the gdm user was not a member of the video
group.  Thank you!

I have verified the attached patch makes it sufficient to run
`modprobe uvesafb v86d=3D$(guix build v86d | head -n1)/sbin/v86d
mode_option=3D1280x800-32` before `herd restart xorg-server` without any
additional chmod.  I will push if nobody objects.

I do however need to remove xf86-video-vesa via
set-xorg-configuration.  Perhaps xf86-video-vesa should not be among
the defaults if uvesafb is to be made a default.  Note that when not
running X as root, xf86-video-vesa does not work anyway.  That=E2=80=99s =
what
uvesafb is for.

If uvesafb should be made a default, v86d:testvbe could be used to
find a suitable resolution as a mode_option parameter.

However I still do not know how best to modprobe uvesafb
automatically.

Regards,
Florian

--j5mxpcugi6ictnsg
Content-Type: text/plain; charset=us-ascii
Content-Disposition: attachment;
	filename="0001-services-gdm-Add-gdm-user-to-video-supplementary-gro.patch"

>From 419ec6f3866d223b88f195466d3e731090240a2a Mon Sep 17 00:00:00 2001
From: Florian Pelz <pelzflorian@pelzflorian.de>
Date: Thu, 26 Mar 2020 15:19:21 +0100
Subject: [PATCH] services: gdm: Add gdm user to 'video' supplementary group.

See <https://lists.gnu.org/archive/html/guix-devel/2020-03/msg00351.html>.

* gnu/services/xorg.scm (%gdm-accounts): Set supplementary groups.
---
 gnu/services/xorg.scm | 1 +
 1 file changed, 1 insertion(+)

diff --git a/gnu/services/xorg.scm b/gnu/services/xorg.scm
index 09379d40c3..d0196a299e 100644
--- a/gnu/services/xorg.scm
+++ b/gnu/services/xorg.scm
@@ -798,6 +798,7 @@ the GNOME desktop environment.")
         (user-account
          (name "gdm")
          (group "gdm")
+         (supplementary-groups '("video"))
          (system? #t)
          (comment "GNOME Display Manager user")
          (home-directory "/var/lib/gdm")
-- 
2.25.1


--j5mxpcugi6ictnsg--