diff --git a/en_US.ISO8859-1/books/faq/book.sgml b/en_US.ISO8859-1/books/faq/book.sgml index dae98876b5..77ef2a77d4 100644 --- a/en_US.ISO8859-1/books/faq/book.sgml +++ b/en_US.ISO8859-1/books/faq/book.sgml @@ -11,7 +11,7 @@ The FreeBSD Documentation Project - $FreeBSD: doc/en_US.ISO_8859-1/books/faq/book.sgml,v 1.140 2001/01/18 01:14:24 brian Exp $ + $FreeBSD: doc/en_US.ISO_8859-1/books/faq/book.sgml,v 1.141 2001/01/31 12:12:13 ben Exp $ This is the FAQ for FreeBSD versions 2.X, 3.X, and 4.X. @@ -7237,6 +7237,49 @@ ttyvb "/usr/libexec/getty Pc" cons25 off secure + + + I used to run XFree86 as a regular user, but now when + I start it it says I must be root! + + + + All X servers need to be run as root in order to get direct + access to your video hardware. Older versions of XFree86 + (<= 3.3.6) installed all bundled servers to be automatically + run as root (setuid to root). This is obviously a security + hazard because X servers are large, complicated programs. + Newer versions of XFree86 do not install the servers setuid to + root for just this reason. + + Obviously, running an X server as the root user is not + acceptable, nor a good idea security-wise. There are two ways + to be able to use X as a regular user. The first is to use + xdm or another display manager + (e.g., kdm); the second is to use the + Xwrapper. + + xdm is a daemon that handles graphical + logins. It is usually started at boot time, and is responsible + for authenticating users and starting their sessions; it is + essentially the graphical counterpart of + getty and login. For + more information on xdm see + the XFree86 + documentation, and the the FAQ + entry on it. + + Xwrapper is the X server wrapper; it is + a small utility to enable one to manually run an X server while + maintaining reasonable safety. It performs some sanity checks + on the command line arguments given, and if they pass, runs the + appropriate X server. If you do not want to run a display + manger for whatever reason, this is for you. If you have + installed the complete ports collection, you can find the port in + /usr/ports/x11/wrapper. + + + My PS/2 mouse doesn't behave properly under X. diff --git a/en_US.ISO_8859-1/books/faq/book.sgml b/en_US.ISO_8859-1/books/faq/book.sgml index dae98876b5..77ef2a77d4 100644 --- a/en_US.ISO_8859-1/books/faq/book.sgml +++ b/en_US.ISO_8859-1/books/faq/book.sgml @@ -11,7 +11,7 @@ The FreeBSD Documentation Project - $FreeBSD: doc/en_US.ISO_8859-1/books/faq/book.sgml,v 1.140 2001/01/18 01:14:24 brian Exp $ + $FreeBSD: doc/en_US.ISO_8859-1/books/faq/book.sgml,v 1.141 2001/01/31 12:12:13 ben Exp $ This is the FAQ for FreeBSD versions 2.X, 3.X, and 4.X. @@ -7237,6 +7237,49 @@ ttyvb "/usr/libexec/getty Pc" cons25 off secure + + + I used to run XFree86 as a regular user, but now when + I start it it says I must be root! + + + + All X servers need to be run as root in order to get direct + access to your video hardware. Older versions of XFree86 + (<= 3.3.6) installed all bundled servers to be automatically + run as root (setuid to root). This is obviously a security + hazard because X servers are large, complicated programs. + Newer versions of XFree86 do not install the servers setuid to + root for just this reason. + + Obviously, running an X server as the root user is not + acceptable, nor a good idea security-wise. There are two ways + to be able to use X as a regular user. The first is to use + xdm or another display manager + (e.g., kdm); the second is to use the + Xwrapper. + + xdm is a daemon that handles graphical + logins. It is usually started at boot time, and is responsible + for authenticating users and starting their sessions; it is + essentially the graphical counterpart of + getty and login. For + more information on xdm see + the XFree86 + documentation, and the the FAQ + entry on it. + + Xwrapper is the X server wrapper; it is + a small utility to enable one to manually run an X server while + maintaining reasonable safety. It performs some sanity checks + on the command line arguments given, and if they pass, runs the + appropriate X server. If you do not want to run a display + manger for whatever reason, this is for you. If you have + installed the complete ports collection, you can find the port in + /usr/ports/x11/wrapper. + + + My PS/2 mouse doesn't behave properly under X.