Bug 634360

Summary:	enable xcsecurity by default
Product:	Gentoo Security	Reporter:	Andrea <andrea>
Component:	Default Configs	Assignee:	Gentoo Security <security>
Status:	RESOLVED INVALID
Severity:	minor	CC:	tsmksubc
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Andrea 2017-10-15 18:38:40 UTC

xcsecurity makes ssh -X meaningful, so it should be enabled by default when available. If not system wide, it should be selected by desktop/plasma or or desktop/gnome make.profile symlink.

I noticed it by accident that it was disabled and I enabled it manually.

Reproducible: Always

Steps to Reproduce:
1. ssh -X
2.
3.

Comment 1 Aaron Bauman (RETIRED) gentoo-dev

2017-10-15 19:59:25 UTC

(In reply to Andrea from comment #0)
> xcsecurity makes ssh -X meaningful, so it should be enabled by default when
> available. If not system wide, it should be selected by desktop/plasma or or
> desktop/gnome make.profile symlink.
> 
> I noticed it by accident that it was disabled and I enabled it manually.
> 
> Reproducible: Always
> 
> Steps to Reproduce:
> 1. ssh -X
> 2.
> 3.

It is enabled by USE flag in x11-base/xorg-server.  This is one of the pinnacles of Gentoo. If you want to ask the x11 folks to enable it by default then please open a bug with them.