Vulnerability Development mailing list archives

Re: Possible flaw in XFree?


From: Vilmos Soti <vilmos () vilmos org>
Date: Fri, 28 Jun 2002 11:10:57 -0700

Hello,

On Friday, June 28 2002, Nuno Branco wrote:

try to start your Xserver with the command

[root@machine branco]$ startx && exit

Maybe it will do the trick :)

No, it will not do the trick. What happens if the user manages to
crash X thus it returns a failure? The "&& exit" won't get executed.

You could either do a

[root@machine branco]$ startx; exit

or, even better, try

[root@machine branco]$ exec startx

And one more thing... DO NOT RUN X AS ROOT!!! AND ESPECIALLY IF YOU ARE
LOGGED IN AS ROOT MAKE SURE THAT YOU HAVE THE HASH SIGN!!!

Vilmos


Current thread: