forked from pool/xorg-x11-server
454b22727a
- n_xorg-wrapper-anybody.patch * replace default config /etc/X11/Xwrapper, which allows anybody to use the wrapper, by a patch for the code, i.e. # rootonly, console, anybody allowed_users=anybody # yes, no, auto needs_root_rights=auto is now the default without any Xwrapper config (needs_root_rights=auto was already the default before) - u_xorg-wrapper-Xserver-Options-Whitelist-Filter.patch * replaced by improved version written by Matthias Gerstner of our security team + simplified the option parsing code a bit + changed the "ignore forbidden argument" logic into an "abort on forbidden argument" logic. This is safer and avoids surprises on the user's end that could occur if the desired command line arguments aren't effective but the Xorg server is still started. + tried to adjust to the coding style present in the file (mostly the function name) + added some logic to apply the option filtering only to non-root users when Xorg is actually started as root. This should allow for full flexibility if root calls the wrapper or if the Xorg server only runs with user privileges. - U_Fix-segfault-on-probing-a-non-PCI-platform-device-on.patch, U_Revert-linux-Fix-platform-device-PCI-detection-for-c.patch, U_Revert-linux-Fix-platform-device-probe-for-DT-based-.patch, U_Revert-linux-Make-platform-device-probe-less-fragile.patch * fix Xserver startup on Raspberry Pi 3 (boo#1176203) - n_xorg-wrapper-rename-Xorg.patch * moved Xorg to Xorg.bin and Xorg.sh to Xorg (boo#1175867) - change default for needs_root_rights to auto in Xwrapper.config (boo#1175867) - reenabled SUID wrapper for TW (boo#1175867) - u_xorg-wrapper-Xserver-Options-Whitelist-Filter.patch * Xserver option whitelist filter (boo#1175867) OBS-URL: https://build.opensuse.org/request/show/838746 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/xorg-x11-server?expand=0&rev=387 |
||
---|---|---|
_service | ||
_servicedata | ||
.gitattributes | ||
.gitignore | ||
50-extensions.conf | ||
b_0001-Prevent-XSync-Alarms-from-senslessly-calling-CheckTr.patch | ||
b_cache-xkbcomp-output-for-fast-start-up.patch | ||
b_sync-fix.patch | ||
modesetting.ids | ||
N_default-module-path.diff | ||
N_Disable-HW-Cursor-for-cirrus-and-mgag200-kernel-modules.patch | ||
N_driver-autoconfig.diff | ||
N_fix_fglrx_screendepth_issue.patch | ||
N_fix-dpi-values.diff | ||
N_Install-Avoid-failure-on-wrapper-installation.patch | ||
n_xorg-wrapper-anybody.patch | ||
n_xorg-wrapper-rename-Xorg.patch | ||
n_xserver-optimus-autoconfig-hack.patch | ||
N_zap_warning_xserver.diff | ||
pre_checkin.sh | ||
README.updates | ||
sysconfig.displaymanager.template | ||
u_01-Improved-ConfineToShape.patch | ||
u_02-DIX-ConfineTo-Don-t-bother-about-the-bounding-box-when-grabbing-a-shaped-window.patch | ||
U_dix-window-Use-ConfigureWindow-instead-of-MoveWindow.patch | ||
U_Fix-segfault-on-probing-a-non-PCI-platform-device-on.patch | ||
U_glamor_egl-Reject-OpenGL-2.1-early-on.patch | ||
u_os-connections-Check-for-stale-FDs.patch | ||
u_Panning-Set-panning-state-in-xf86RandR12ScreenSetSize.patch | ||
u_pci-primary-Fix-up-primary-PCI-device-detection-for-the-platfrom-bus.patch | ||
u_randr-Do-not-crash-if-slave-screen-does-not-have-pro.patch | ||
u_render-Cast-color-masks-to-unsigned-long-before-shifting-them.patch | ||
U_Revert-linux-Fix-platform-device-PCI-detection-for-c.patch | ||
U_Revert-linux-Fix-platform-device-probe-for-DT-based-.patch | ||
U_Revert-linux-Make-platform-device-probe-less-fragile.patch | ||
u_Use-better-fallbacks-to-generate-cookies-if-arc4rand.patch | ||
u_vesa-Add-VBEDPMSGetCapabilities-VBEDPMSGet.patch | ||
u_xfree86-Do-not-claim-pci-slots-if-fb-slot-is-already.patch | ||
U_xfree86_take_second_ref_for_xcursor.patch | ||
U_xkb-Fix-heap-overflow-caused-by-optimized-away-min.patch | ||
u_xorg-server-xdmcp.patch | ||
u_xorg-wrapper-build-Build-position-independent-code.patch | ||
u_xorg-wrapper-Drop-supplemental-group-IDs.patch | ||
u_xorg-wrapper-Xserver-Options-Whitelist-Filter.patch | ||
U_xwayland-Allow-passing-a-fd.patch | ||
xkb-tmpfiles.conf | ||
xorg-backtrace | ||
xorg-server-provides | ||
xorg-x11-server-byte-order.patch | ||
xorg-x11-server.changes | ||
xorg-x11-server.macros.in | ||
xorg-x11-server.spec | ||
xorgcfg.tar.bz2 | ||
xserver-1.20.9.tar.xz |
Xserver module update mechanism ------------------------------- If any corresponding Xserver module is found below "/usr/lib/xorg/modules/updates/" ("/usr/lib64/xorg/modules/updates/" on biarch 32/64 bit platforms) it will be favored over the one in "/usr/lib/xorg/modules/" ("/usr/lib64/xorg/modules/" on biarch 32/64 bit platforms).