[Xorg] Current blocker bug list

[Alan Cox]

On Gwe, 2004-08-13 at 12:39, Alan Cox wrote:
> A combination of #1 and a .cf configured policy is needed. The suid 
> helper itself is pretty trivial
> 
> 	#define FIXED_PATH	wherever
> 
> 	int main(int argc, char *argv[])
> 	{
> 		exit(chown(FIXED_PATH, 0, 0) ? errno: 0);
> 	}
> 

Ok turns out that can be tricked in some environments. I think we have
to fail hard and print a message clearly stating what the problem is and
how to fix it. I don't think you can do it securely because you
have to deal with an attacker creating symlinks.

Alan