Tim Kuijsten wrote: > Op 28-09-15 om 23:29 schreef Philip Guenther: > > On Mon, Sep 28, 2015 at 1:31 PM, L. V. Lammert <l...@omnitec.net> wrote: > > ... > >> X has never been installed on this box, .. why now? > > > > http://www.openbsd.org/faq/faq4.html#FilesNeededX > > > > From the FAQ: > "By itself, installing X on a system does not change the risk of > external security issues." > > I might be misinterpreting "external" here, but considering some files > from the X sets[1], wouldn't the following be more accurate: "Installing > X adds one setuid root binary and some setgid non-root binaries on a > system, but apart from that does not change the risk of external > security issues."?
those are local security issues.