https://www.openbsd.org/faq/faq11.html says
The recommended way to run X is with the xenodm(1) display manager.
It offers some important security benefits over the traditional
startx(1) command.
https://www.openbsd.org/faq/upgrade65.html says
The Xorg binary is no longer installed setuid, so startx(1) can no
longer be used by non-root users. The xenodm(1) display manager has
to be used instead.
So should the faq be updated?
(Fell free to change the wording to something good)
Jan
--- faq11.html.orig Fri Aug 23 08:30:22 2019
+++ faq11.html Fri Aug 23 08:32:26 2019
@@ -68,7 +68,10 @@ information in <code>/usr/X11R6/README</code> on the i
The recommended way to run X is with the
<a href="https://man.openbsd.org/xenodm">xenodm(1)</a> display manager.
It offers some important security benefits over the traditional
-<a href="https://man.openbsd.org/startx">startx(1)</a> command.
+<a href="https://man.openbsd.org/startx">startx(1)</a> command:
+the <code>Xorg</code> binary is no longer installed setuid,
+so <a href="https://man.openbsd.org/OpenBSD-6.5/startx">startx(1)</a>
+can no longer be used by non-root users.
<p>
If <a href="https://man.openbsd.org/xenodm">xenodm(1)</a> wasn't enabled
No comments:
Post a Comment