From mboxrd@z Thu Jan 1 00:00:00 1970 From: Marius Bakke Subject: Re: How to setuid X.org? Date: Mon, 20 Mar 2017 07:48:01 +0100 Message-ID: <877f3k78bi.fsf@kirby.i-did-not-set--mail-host-address--so-tickle-me> References: <20170319200255.5ef60556@khaalida> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:42541) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cpr6w-0007Ep-BW for help-guix@gnu.org; Mon, 20 Mar 2017 02:48:11 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cpr6s-0004uC-2Z for help-guix@gnu.org; Mon, 20 Mar 2017 02:48:10 -0400 Received: from out1-smtp.messagingengine.com ([66.111.4.25]:39992) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1cpr6r-0004tH-AJ for help-guix@gnu.org; Mon, 20 Mar 2017 02:48:06 -0400 In-Reply-To: <20170319200255.5ef60556@khaalida> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org Sender: "Help-Guix" To: dian_cecht@zoho.com, help-guix@gnu.org --=-=-= Content-Type: text/plain dian_cecht@zoho.com writes: > Hello, > > I have tried several times to get X.org (/bin/X, specifically) > setuid for obvious reasons. However, I can't find any examples of usage > and attempting to follow the infopages has led to a bunch of different > errors and failures (and rather useless error messages). I currently > don't have any useful logs of what I tried and the output (it was on a > LiveUSB I'm using for testing purposes), but I'm not wanting to use > %desktop-services (or other service packs, for that matter), which has > already been suggested. > > Can someone either A) improve the documents for setuid programs (and > gexps) with some practical examples, or B) provide me with a (hopefully > working) snippet to add to the config? Setuid programs are documented here: https://www.gnu.org/software/guix/manual/guix.html#Setuid-Programs Following the "passwd" example, making "X" setuid root would be declared like this: (operating-system [...] (setuid-programs (cons #~(string-append #$xorg-server "/bin/X") %setuid-programs)) It's not clear to me how to improve this since it's very similar to how other defaults are overridden. Any suggestions? TIA! --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEu7At3yzq9qgNHeZDoqBt8qM6VPoFAljPeyEACgkQoqBt8qM6 VPp+Qwf/VsyPmOwQkS+TxWDBiWC1BO0GUVoghwdqDS+fUpKEo84Uc36B6fey1WtC q0Gd98ycleg7Et9we8xjywO1v34h3iVmEo0Gkxx3ORO6I2heaGbmR50R0Z77dZCt 8/Ik3xwFPpEsSlLjyF7o5cqz4Oy5N2GkU57iPNtKu6N3vgc3+hgZXsBC92NmNOge LkbXfRIcoFWTDADJRhet9DnCfKMe8YyUN+t8w0SH80QIXfTykyLmhHuHTxf/I8+j o2XaHjEpFEasDdBx5NqZwZT17ElHWT6gjrxXDUgJgEPq9ym/dFgTXlUDut1Pgn8y yv2n5mZpsxYvdRDWIdAB4WyYrk00yw== =Ol/B -----END PGP SIGNATURE----- --=-=-=--