xsecurity extension?

Shaya Potter spotter at cs.columbia.edu
Mon Mar 31 18:48:07 PDT 2008


ok, it seems that the below is a problem w/ ubuntu feisty, running on a 
gutsy box, it works fine.

Shaya Potter wrote:
> i can't seem to get "untrusted" x sessions to work, I assume its that I 
> misunderstand it, but I'm really confused at the moment, any help would 
> be appreciated.
> 
> for example
> 
> 1) "su" to root
> spotter at zaphod:~$ su -
> Password:
> 
> 2) setup display
> zaphod:~# export DISPLAY=:0
> 
> 3) run xterm, shouldn't work due to not having key
> zaphod:~# xterm
> Xlib: connection to ":0.0" refused by server
> Xlib: No protocol specified
> 
> Warning: This program is an suid-root program or is being run by the 
> root user.
> The full text of the error or warning message cannot be safely formatted
> in this environment. You may get a more descriptive message by running the
> program as a non-root user or by removing the suid bit on the executable.
> xterm Xt error: Can't open display: %s
> 
> 4) add regular key
> 
> zaphod:~# xauth add :0 MIT-MAGIC-COOKIE-1 e69bb65a53a9f24e9a9eb5d917670433
> 
> 5) run xterm again (it works)
> 
> zaphod:~# xterm
> Warning: Cannot convert string "vlines2" to type Pixmap
> (reverse-i-search)`gener': xauth generate :0 MIT-MAGIC-COOKIE-1 untrusted
> 
> 6) generate a "trusted" key
> 
> zaphod:~# xauth generate :0 MIT-MAGIC-COOKIE-1 trusted
> 
> 7) run xterm again (it works)
> 
> zaphod:~# xterm
> Warning: Cannot convert string "vlines2" to type Pixmap
> 
> 8) generate an untrusted key
> 
> zaphod:~# xauth generate :0 MIT-MAGIC-COOKIE-1 untrusted
> 
> 9) run xterm again (it doesn't work)
> 
> zaphod:~# xterm
> X Error of failed request:  BadAtom (invalid Atom parameter)
>    Major opcode of failed request:  20 (X_GetProperty)
>    Atom id in failed request:  0x17
>    Serial number of failed request:  3
>    Current serial number in output stream:  3
> 
> _______________________________________________
> xorg mailing list
> xorg at lists.freedesktop.org
> http://lists.freedesktop.org/mailman/listinfo/xorg




More information about the xorg mailing list