dropping privileges

[Lone_Wolf]

On 08-01-2022 15:45, skullnobrains wrote:
> hello all
>
> can anyone share why there is no option to drop privileges in xorg ?
>
> for those of us who want some better privilege separations and either 
> do not care about hot plugging or can handle it some other way (such 
> as using the console keyboard and moused), it would be very convenient 
> to be able to start xorg as root and let it drop privileges (real and 
> effective) after opening required devices
>
Are you sure you can't achieve that using Xorg.wrap and Xwrapper.config ?

check man Xorg.wrap for details

> likewise, it would be great to be able to define privileges on the 
> socket allowing members of a specific group (could be the X user's 
> main group) to use the display
>
> thanks to anyone who cares to share some light on why this has never 
> been done. i believe i am not the first person thinking such an option 
> might come in handy
>
> best regards
>
> sk


Lone_Wolf