[Bug 278204] x11/xkeyboard-config: allow non-root to write into /var/lib/xkb

From: <bugzilla-noreply_at_freebsd.org>
Date: Sat, 06 Apr 2024 20:52:04 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=278204

            Bug ID: 278204
           Summary: x11/xkeyboard-config: allow non-root to write into
                    /var/lib/xkb
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: x11@FreeBSD.org
          Reporter: jbeich@FreeBSD.org
          Assignee: x11@FreeBSD.org
             Flags: maintainer-feedback?(x11@FreeBSD.org)

Created attachment 249774
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=249774&action=edit
v1 (apply via "git am")

Only Xorg has setuid bit (bug 273161), so can write in root-owned directories.

Before:

  $ truss Xwayland :9 |& fgrep /var/lib/xkb
  access("/var/lib/xkb/",X_OK|W_OK)                ERR#13 'Permission denied'
  access("/var/lib/xkb/",X_OK|W_OK)                ERR#13 'Permission denied'
  access("/var/lib/xkb/",X_OK|W_OK)                ERR#13 'Permission denied'
  access("/var/lib/xkb/",X_OK|W_OK)                ERR#13 'Permission denied'

After:

  $ truss Xwayland :9 |& fgrep /var/lib/xkb
  access("/var/lib/xkb/",X_OK|W_OK)                = 0 (0x0)
  access("/var/lib/xkb/",X_OK|W_OK)                = 0 (0x0)
  open("/var/lib/xkb/server-9.xkm",O_RDONLY,0666)  = 10 (0xa)
  unlink("/var/lib/xkb/server-9.xkm")              = 0 (0x0)
  access("/var/lib/xkb/",X_OK|W_OK)                = 0 (0x0)
  access("/var/lib/xkb/",X_OK|W_OK)                = 0 (0x0)
  open("/var/lib/xkb/server-9.xkm",O_RDONLY,0666)  = 12 (0xc)
  unlink("/var/lib/xkb/server-9.xkm")              = 0 (0x0)

-- 
You are receiving this mail because:
You are the assignee for the bug.