Hello,
On Wed, 28 Dec 2016 19:04:20 +0000
Taylor R Campbell <campbell+netbsd-tech-x11%mumble.net@localhost> wrote:
Date: Wed, 28 Dec 2016 10:06:00 -0500
From: Michael <macallan%netbsd.org@localhost>
On Wed, 28 Dec 2016 07:26:26 +0000
coypu%SDF.ORG@localhost wrote:
> On Wed, Dec 28, 2016 at 02:49:54AM +0000, David Holland wrote:
> NetBSD is just about the only OS still using xorg as setuid root.
> Pretty much everyone else did away with it.
We only really need it for /dev/pci*, because that lets you mmap()
arbitrary PCI space - things like wsfb or sbus graphics work without it.
Likewise DRM/KMS. We should disable options INSECURE by default on
x86 and make Xorg not be suid root. Obscure systems that still need
it -- e.g., VIA, perhaps, which has no KMS driver -- can use custom
kernel configs.
That would kill almost all X on non-x86 PCI.