Find a file
Ray Strode c424458c93 xwayland: default to local user if no xauth file given. [CVE-2015-3164 3/3]
Right now if "-auth" isn't passed on the command line, we let
any user on the system connect to the Xwayland server.

That's clearly suboptimal, given Xwayland is generally designed
to be used by one user at a time.

This commit changes the behavior, so only the user who started the
X server can connect clients to it.

Signed-off-by: Ray Strode <rstrode@redhat.com>
Reviewed-by: Daniel Stone <daniels@collabora.com>
Reviewed-by: Alan Coopersmith <alan.coopersmith@oracle.com>
Signed-off-by: Keith Packard <keithp@keithp.com>
(cherry picked from commit 76636ac12f)
2015-06-03 09:05:39 -04:00
composite Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
config config/udev: Respect seat assignments when assigned devices 2015-01-30 14:09:24 +01:00
damageext Replace 'pointer' type with 'void *' 2014-01-12 10:24:11 -08:00
dbe dbe: Call to DDX SwapBuffers requires address of int, not unsigned int [CVE-2014-8097 pt. 2] 2014-12-09 11:26:58 -08:00
dix dix: Do not allow device transform to be set on valuatorless devices 2015-06-03 09:05:38 -04:00
doc doc: Create a script to filter xmlto output 2015-01-05 14:24:06 -08:00
dri3 dri3: unvalidated lengths in DRI3 extension swapped procs [CVE-2014-8103 1/2] 2014-12-08 18:09:48 -08:00
exa Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
fb Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
glamor glamor: fix build when DRI3 is not defined 2015-06-03 09:05:38 -04:00
glx glx: Add hack for GLX-1.2-style naked windows to GetDrawableAttributes 2014-12-10 11:01:43 -05:00
hw xwayland: default to local user if no xauth file given. [CVE-2015-3164 3/3] 2015-06-03 09:05:39 -04:00
include os: support new implicit local user access mode [CVE-2015-3164 2/3] 2015-06-03 09:05:39 -04:00
m4 xorg-tls: fix warning, replace AC_TRY_COMPILE with AC_COMPILE_IFELSE 2014-01-22 11:18:42 -08:00
man Add -iglx & +iglx to Xserver.man 2014-11-30 11:32:21 -08:00
mi mi: Partial pie-slice filled arcs may need more space for spans 2015-06-03 09:05:37 -04:00
miext Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
os os: support new implicit local user access mode [CVE-2015-3164 2/3] 2015-06-03 09:05:39 -04:00
present present: If present_queue_vblank() fails, do present_execute(). 2014-12-25 13:39:04 -08:00
pseudoramiX pseudoramiX: Add _X_ATTRIBUTE_PRINTF attributes to debug functions. 2014-01-27 11:38:34 -08:00
randr randr: use randr: prefix in ErrorF() 2015-06-03 09:05:36 -04:00
record Drop trailing whitespaces 2014-11-12 10:25:00 +10:00
render render: unvalidated lengths in Render extn. swapped procs [CVE-2014-8100 2/2] 2014-12-08 18:09:48 -08:00
test Add REQUEST_FIXED_SIZE testcases to test/misc.c 2014-12-08 18:09:49 -08:00
Xext shm: Fix xselinux resource initialization for xinerama pixmaps 2015-06-03 09:05:38 -04:00
xfixes xfixes: unvalidated length in SProcXFixesSelectSelectionInput [CVE-2014-8102] 2014-12-08 18:09:48 -08:00
Xi Fix subwindow in Xi emulated events 2015-01-07 09:22:12 +10:00
xkb xkb: Check strings length against request size 2015-02-10 14:40:00 -08:00
.dir-locals.el Add .dir-locals.el 2013-08-17 12:17:36 +02:00
.gitignore .gitignore: Add new autotools file 'test-driver' 2014-04-21 13:41:42 -07:00
autogen.sh autogen.sh: Honor NOCONFIGURE=1 2012-10-19 13:12:33 +10:00
configure.ac Xephyr: Don't crash when no command line argument is specified 2015-06-03 09:05:38 -04:00
COPYING modesetting: Merge modesetting's COPYING into the xserver's. 2014-09-15 12:46:02 -07:00
devbook.am doc: Create a script to filter xmlto output 2015-01-05 14:24:06 -08:00
docbook.am docbook.am: embed css styles inside the HTML HEAD element 2011-09-21 14:07:49 -07:00
fix-miregion Change region implementation names to eliminate the 'mi' prefix 2010-06-05 17:47:32 -07:00
fix-miregion-private Change region implementation names to eliminate the 'mi' prefix 2010-06-05 17:47:32 -07:00
fix-patch-whitespace Rename region macros to eliminate screen argument 2010-06-05 18:59:00 -07:00
fix-region Rename region macros to eliminate screen argument 2010-06-05 18:59:00 -07:00
Makefile.am DIST_SUBDIRS needs to include glamor, even if it isn't built 2014-02-13 15:25:56 -08:00
manpages.am Xorg: Add a suid root wrapper 2014-03-12 08:50:05 +01:00
README packaging: provide a default README file #24206 2010-01-27 14:00:17 -08:00
xorg-server.m4 macros: clarify documentation 2012-11-05 13:24:57 -06:00
xorg-server.pc.in xfree86: link modules against Xorg symbols on Cygwin 2012-04-05 21:57:07 -05:00
xserver.ent.in doc: relocate xserver.ent in the package root directory 2011-05-14 11:22:26 -07:00

					X Server

The X server accepts requests from client applications to create windows,
which are (normally rectangular) "virtual screens" that the client program
can draw into.

Windows are then composed on the actual screen by the X server
(or by a separate composite manager) as directed by the window manager,
which usually communicates with the user via graphical controls such as buttons
and draggable titlebars and borders.

For a comprehensive overview of X Server and X Window System, consult the
following article:
http://en.wikipedia.org/wiki/X_server

All questions regarding this software should be directed at the
Xorg mailing list:

        http://lists.freedesktop.org/mailman/listinfo/xorg

Please submit bug reports to the Xorg bugzilla:

        https://bugs.freedesktop.org/enter_bug.cgi?product=xorg

The master development code repository can be found at:

        git://anongit.freedesktop.org/git/xorg/xserver

        http://cgit.freedesktop.org/xorg/xserver

For patch submission instructions, see:

	http://www.x.org/wiki/Development/Documentation/SubmittingPatches

For more information on the git code manager, see:

        http://wiki.x.org/wiki/GitPage