4 ms·
> Xserver without root permissions There must have been a regression. There still was lingering suid root binaries that OpenBSD got bit by recently. I mean, i
by srfilipek 8y ago
> Xserver without root permissions
There must have been a regression. There still was lingering suid root binaries that OpenBSD got bit by recently.
I mean, it was security fix #1 for release 6.4: https://www.openbsd.org/errata64.html https://www.openbsd.org/errata64.html
- chousuke 8y agoAFAIK that suid binary was used to enable starting the X server without a display manager. It still actually ran as non-root.
- ben_bai 8y agoIt was setuid root but dropped privilege, but the dropping privilege came after parsing the command arguments and doing initialization, so there was a small time window while it still runs as root and in that time it could be tricked into overriding any file.