Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 448588 - x11-wm/xpra-0.7.5 - server Xorg permissions problem
Summary: x11-wm/xpra-0.7.5 - server Xorg permissions problem
Status: RESOLVED WONTFIX
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Michael Weber (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2012-12-25 20:17 UTC by Don Bishop
Modified: 2013-01-11 09:01 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Don Bishop 2012-12-25 20:17:21 UTC
`/usr/bin/xpra_Xdummy` script tries to copy `/usr/bin/Xorg` to local user's `~/home/.xpra/` but Xorg is `-rws--x--x 1 root root 2198960 Dec 22 19:01 /usr/bin/Xorg` by default. Thus the script bombs and new display cannot be started.

Workaround is to `chown root:<MYGROUP> /usr/bin/Xorg` followed by a `chmod 751 /usr/bin/Xorg`

That will allow `xpra start:<num>` to succeed for any user in <MYGROUP> but clearly something better is needed.

(xpra is a brilliant application!)
Comment 1 Jeroen Roovers (RETIRED) gentoo-dev 2012-12-25 23:21:01 UTC
        einfo
        elog "please make your Xorg binary readable for users of xpra"
        elog "  chmod a+r /usr/bin/Xorg"
        elog "and think about the security impact"
        einfo

I guess you missed that.
Comment 2 Don Bishop 2012-12-26 01:32:23 UTC
That gets echoed when the package is emerged.  Troubleshooting things like this sometimes gets done by someone else.
Comment 3 Michael Weber (RETIRED) gentoo-dev 2012-12-26 22:16:57 UTC
Hello,

/var/log/portage/elog/summary.log and simmilar files exists, I cannot fix your internal communication. I see the problem and keep an eye on it wrt xorg-server[suid] et al, it might vanish in near future.

Michael
Comment 4 Chí-Thanh Christopher Nguyễn gentoo-dev 2013-01-05 13:51:24 UTC
Will it work if you create a symlink instead of copying?
Comment 5 Michael Weber (RETIRED) gentoo-dev 2013-01-11 09:01:31 UTC
(In reply to comment #4)
> Will it work if you create a symlink instead of copying?

No, the point in copying this file to ~/.xpra/Xorg is to strip the setuid to run it as user, otherwise (symlinked) you get an

  Fatal server error:
  The '-logfile' option cannot be used with elevated privileges.

Symlinks just get resolved and rights or $(realpath .) are effective.