On 09/17/2017 04:30 PM, Adam Borowski wrote: > On Sun, Sep 17, 2017 at 01:49:00PM -0400, fsmithred wrote: >> - standard system install of debian stretch plus openbox, lxterminal, >> lxpanel and a few other packages. >> - changed sources to devuan ascii, update, add key, update again >> - install sysvinit-core, reboot. >> - [optional] install live-config-sysvinit to replace live-config-systemd >> - remove libpam-systemd systemd systemd-shim >> - apt-get autoremove > >> - install consolekit policykit-1 libpam-ck-connector (I don't know if >> these were really needed. It seemed ok, but I'm using startx to get a >> desktop.) > > policykit is needed only for letting an unprivileged user > shutdown/suspend/etc from a GUI, mount removable media and such. It doesn't > sound like you have an use for it. > >> - install xserver-xorg-legacy > > Bad idea! You'd want xserver-xorg-legacy only if you have a truly ancient > graphics card or an {u,eu,...}dev misconfiguration wrt input (or run hurd). > > Obviously if for you the regular user is almost as sensitive as root anyway > it's not a big concern, but if we stick to principles here we avoid training > the user that making random things setuid is a good solution. With KVM, > there's no need for X to run as root. > > > Meow! >
I removed xserver-xorg-legacy, commented out "needs_root..." and installed a display manager (slim). X will run, but I'm confused about what part of it should no longer be running as root. They look the same to me. without xserver-xorg-legacy without "needs_root_rights" with display manager: root 2583 0.0 0.1 128876 15964 ? Ss 10:21 0:00 /usr/bin/slim -d root 2605 0.1 0.5 296356 45832 tty7 Ssl+ 10:21 0:03 /usr/lib/xorg/Xorg -nolisten tcp -auth /var/run/slim.auth with xserver-xorg-legacy with "needs_root_rights" without display manager: user 2118 0.0 0.0 4288 1580 tty1 S+ 15:07 0:00 /bin/sh /usr/bin/startx user 2141 0.0 0.0 22312 1144 tty1 S+ 15:07 0:00 xinit /etc/X11/xinit/xinitrc -- /etc/X11/xinit/xserverrc :0 vt1 -keeptty -auth /tmp/serverauth.wP0Ynv4 root 2142 0.5 0.5 329932 45676 tty1 Sl 15:07 0:00 /usr/lib/xorg/Xorg -nolisten tcp :0 vt1 -keeptty -auth /tmp/serverauth.wP0Ynv40Nd fsmithred _______________________________________________ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng