Messages in this thread | | | Date | Tue, 22 May 2007 04:16:57 -0400 | From | Jeff Garzik <> | Subject | Re: [RFC] enhancing the kernel's graphics subsystem |
| |
Dave Airlie wrote: >> It is a quite sensible idea. >> >> The userspace X server SHOULD be running under a non-root user, with >> appropriate fine-grained privs granted to it. >> >> "I need root to do graphics" is a myopic, antiquated view of the world. > > Did I say the X server? There are policy decisions that are root only > also authorisation of processes to render etc..
Root only today, maybe, but this thread is talking about future directions. Don't lock your design into a coarse-grained security model.
> I'm not sure we can punt all that in-kernel.
See my response to Alan.
Jeff
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |