From: Ashley Dixon <ash@suugaku.co.uk>
To: gentoo-user@lists.gentoo.org
Subject: Re: [gentoo-user] Re: dns/bind-tools 9.14 -> 9.16 pulling in 17 new dependencies?!
Date: Wed, 22 Jul 2020 02:39:27 +0100 [thread overview]
Message-ID: <20200722013927.dbskcenueiknwu64@ad-gentoo-main> (raw)
In-Reply-To: <20200722013007.GA25203@waltdnes.org>
[-- Attachment #1: Type: text/plain, Size: 2142 bytes --]
On Tue, Jul 21, 2020 at 09:30:07PM -0400, Walter Dnes wrote:
> According to news item https://www.gentoo.org/support/news-items/2020-06-24-xorg-server-dropping-default-suid.html
>
> * xorg-server will no longer be "suid" *BY DEFAULT*
> * that means *THE DEFAULT* is to require a logind server like systemd
> or elogind
>
> The news item also says...
>
> > Users who do not wish to use logind interface or have rare hardware
> > that does not use KMS and because of that, require root privileges
> > to operate, can manually re-enable 'suid' and disable 'elogind' USE
> > flags in order to preserve the previous behavior. However, please
> > note that this is heavily discouraged to run X server as root due
> > to security reasons. The 'suid' USE flag will remain as optional
> > opt-in for the need of legacy hardware.
>
> I've set "x11-base/xorg-server glamor suid udev xorg" in package.use
> and "-elogind" in make.conf, and no additional packages are required. I
> used to start with USE="-*" but I don't do that anymore. Instead I use
>
> USE="10bit X apng ffmpeg jpeg opengl png szip truetype x264 x265 xorg threads
> webp -acl -arping -berkdb -bindist -caps -cracklib -crypt -elogind -filecaps
> -gallium -gdbm -graphite -iconv -introspection -ipc -iptables -ipv6 -libav
> -libglvnd -llvm -manpager -nls -openmp -pam -pch -sendmail -tcpd -udev -udisks
> -unicode -xinerama"
There was a big argument about it over on Gentoo-Dev. It essentially reduced to
the point that although most Gentoo users are still going to want "suid" (in the
absence of systemd/elogind or another fancy login manager), Portage should
provide good, non-anti-pattern, secure defaults for _new_ users, however much
of an inconvenience it may be for existing users who run X with `startx`. I
generally agree with them on this point; "suid" is horribly outdated, however
ubiquitous (especially for minimalist systems).
https://www.mail-archive.com/gentoo-dev@lists.gentoo.org/msg89536.html
--
Ashley Dixon
suugaku.co.uk
2A9A 4117
DA96 D18A
8A7B B0D2
A30E BF25
F290 A8AA
[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]
next prev parent reply other threads:[~2020-07-22 1:40 UTC|newest]
Thread overview: 31+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-07-20 14:39 [gentoo-user] dns/bind-tools 9.14 -> 9.16 pulling in 17 new dependencies?! Grant Edwards
2020-07-20 14:52 ` Ashley Dixon
2020-07-20 15:20 ` Neil Bothwick
2020-07-20 15:31 ` Alarig Le Lay
2020-07-20 15:36 ` Neil Bothwick
2020-07-20 16:04 ` Ashley Dixon
2020-07-20 16:07 ` Michael Orlitzky
2020-07-21 13:08 ` [gentoo-user] " Grant Edwards
2020-07-21 14:40 ` Michael Orlitzky
2020-07-21 14:47 ` Neil Bothwick
2020-07-21 15:03 ` Grant Edwards
2020-07-21 15:06 ` Neil Bothwick
2020-07-21 15:23 ` Peter Humphrey
2020-07-21 16:00 ` Grant Edwards
2020-07-21 17:15 ` Grant Edwards
2020-07-22 1:30 ` Walter Dnes
2020-07-22 1:39 ` Ashley Dixon [this message]
2020-07-22 2:29 ` Grant Edwards
2020-07-22 3:21 ` Ashley Dixon
2020-07-22 13:25 ` Grant Edwards
2020-07-22 13:42 ` Walter Dnes
2020-07-22 4:40 ` Walter Dnes
2020-07-22 13:27 ` Grant Edwards
2020-07-23 5:02 ` Michael Orlitzky
2020-07-22 8:46 ` Peter Humphrey
2020-07-22 13:59 ` Walter Dnes
2020-07-22 15:13 ` Peter Humphrey
2020-07-23 5:45 ` Walter Dnes
2020-07-23 6:17 ` Ashley Dixon
2020-07-23 7:59 ` Peter Humphrey
2020-07-23 14:18 ` Wols Lists
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20200722013927.dbskcenueiknwu64@ad-gentoo-main \
--to=ash@suugaku.co.uk \
--cc=gentoo-user@lists.gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox