Doesn't running xorg with `needs_root_rights=yes` create a security risk?

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP











up vote
0
down vote

favorite












I am trying to get xpra running using the Xdummy driver and in following the examples on https://xpra.org/trac/wiki/Xdummy I tried the example there with this command. I suspect that it starts on a separate display because of the :10 at the end because it is not an example with attaches to an exiting xpra display.



Xorg -noreset +extension GLX +extension RANDR +extension RENDER -logfile ./10.log -config ./xorg.conf :10


The first instance resulted in the error /usr/lib/xorg/Xorg.wrap: Only console users are allowed to run the X server which I fixed by changing allowed_users=console to allowed_users=anybody in /etc/X11/Xwrapper.conf.



The second trial resulted in the error:



Fatal server error: 
(EE) parse_vt_settings: Cannot open /dev/tty0 (Permission denied)


Some web searching resulted in the suggestion to add needs_root_rights=yes to /etc/X11/Xwrapper.conf which enabled it to work.



Because the error message stated parse_vt_settings I tried add -novtswitch from the xorg man page (whose meaning I don't understand) to the command invocation but that made no difference. needs_root_rights was required.



Doesn't needs_root_rights=yes create a security risk?









share

























    up vote
    0
    down vote

    favorite












    I am trying to get xpra running using the Xdummy driver and in following the examples on https://xpra.org/trac/wiki/Xdummy I tried the example there with this command. I suspect that it starts on a separate display because of the :10 at the end because it is not an example with attaches to an exiting xpra display.



    Xorg -noreset +extension GLX +extension RANDR +extension RENDER -logfile ./10.log -config ./xorg.conf :10


    The first instance resulted in the error /usr/lib/xorg/Xorg.wrap: Only console users are allowed to run the X server which I fixed by changing allowed_users=console to allowed_users=anybody in /etc/X11/Xwrapper.conf.



    The second trial resulted in the error:



    Fatal server error: 
    (EE) parse_vt_settings: Cannot open /dev/tty0 (Permission denied)


    Some web searching resulted in the suggestion to add needs_root_rights=yes to /etc/X11/Xwrapper.conf which enabled it to work.



    Because the error message stated parse_vt_settings I tried add -novtswitch from the xorg man page (whose meaning I don't understand) to the command invocation but that made no difference. needs_root_rights was required.



    Doesn't needs_root_rights=yes create a security risk?









    share























      up vote
      0
      down vote

      favorite









      up vote
      0
      down vote

      favorite











      I am trying to get xpra running using the Xdummy driver and in following the examples on https://xpra.org/trac/wiki/Xdummy I tried the example there with this command. I suspect that it starts on a separate display because of the :10 at the end because it is not an example with attaches to an exiting xpra display.



      Xorg -noreset +extension GLX +extension RANDR +extension RENDER -logfile ./10.log -config ./xorg.conf :10


      The first instance resulted in the error /usr/lib/xorg/Xorg.wrap: Only console users are allowed to run the X server which I fixed by changing allowed_users=console to allowed_users=anybody in /etc/X11/Xwrapper.conf.



      The second trial resulted in the error:



      Fatal server error: 
      (EE) parse_vt_settings: Cannot open /dev/tty0 (Permission denied)


      Some web searching resulted in the suggestion to add needs_root_rights=yes to /etc/X11/Xwrapper.conf which enabled it to work.



      Because the error message stated parse_vt_settings I tried add -novtswitch from the xorg man page (whose meaning I don't understand) to the command invocation but that made no difference. needs_root_rights was required.



      Doesn't needs_root_rights=yes create a security risk?









      share













      I am trying to get xpra running using the Xdummy driver and in following the examples on https://xpra.org/trac/wiki/Xdummy I tried the example there with this command. I suspect that it starts on a separate display because of the :10 at the end because it is not an example with attaches to an exiting xpra display.



      Xorg -noreset +extension GLX +extension RANDR +extension RENDER -logfile ./10.log -config ./xorg.conf :10


      The first instance resulted in the error /usr/lib/xorg/Xorg.wrap: Only console users are allowed to run the X server which I fixed by changing allowed_users=console to allowed_users=anybody in /etc/X11/Xwrapper.conf.



      The second trial resulted in the error:



      Fatal server error: 
      (EE) parse_vt_settings: Cannot open /dev/tty0 (Permission denied)


      Some web searching resulted in the suggestion to add needs_root_rights=yes to /etc/X11/Xwrapper.conf which enabled it to work.



      Because the error message stated parse_vt_settings I tried add -novtswitch from the xorg man page (whose meaning I don't understand) to the command invocation but that made no difference. needs_root_rights was required.



      Doesn't needs_root_rights=yes create a security risk?







      permissions xorg





      share












      share










      share



      share










      asked 8 mins ago









      vfclists

      2,51552541




      2,51552541

























          active

          oldest

          votes











          Your Answer







          StackExchange.ready(function()
          var channelOptions =
          tags: "".split(" "),
          id: "106"
          ;
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function()
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled)
          StackExchange.using("snippets", function()
          createEditor();
          );

          else
          createEditor();

          );

          function createEditor()
          StackExchange.prepareEditor(
          heartbeatType: 'answer',
          convertImagesToLinks: false,
          noModals: false,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: null,
          bindNavPrevention: true,
          postfix: "",
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          );



          );













           

          draft saved


          draft discarded


















          StackExchange.ready(
          function ()
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f474668%2fdoesnt-running-xorg-with-needs-root-rights-yes-create-a-security-risk%23new-answer', 'question_page');

          );

          Post as a guest



































          active

          oldest

          votes













          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes















           

          draft saved


          draft discarded















































           


          draft saved


          draft discarded














          StackExchange.ready(
          function ()
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f474668%2fdoesnt-running-xorg-with-needs-root-rights-yes-create-a-security-risk%23new-answer', 'question_page');

          );

          Post as a guest













































































          Popular posts from this blog

          How to check contact read email or not when send email to Individual?

          Bahrain

          Postfix configuration issue with fips on centos 7; mailgun relay