4 ms·
From the RH bug report (https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14665 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14665), this is describe
by bubblethink 8y ago
From the RH bug report (https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14665 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14665), this is described as “an incorrect permission check for -modulepath and -logfile options when starting X.Org,". Would wayland be immune to these kinds of things, or is it not relevant here ? And is OpenBSD planning to switch to wayland ?
- bitwize 8y agoThis vulnerability can be mitigated if you don't run X as root. Use the modesetting driver and ensure permissions to the video device with Unix groups or a mechanism like systemd-logind. Since Wayland compositors are almost never setuid root, it isn't a problem for them.