Re: new device driver features

Jon Smirl wrote:
> We might also want to try building a model where the server doesn't need to run
> with root priv. What would be the issues with removing the need for root?

I just joined the list today...so I'll bite on this one.

Linus seems willing to let us lighten up the security policies we've 
been using for DRI by not requiring the every buffer of graphics 
commands be sanitized...but going as far as not having a trusted entity 
to manage direct rendering permission may not fly.

The issue as I understand it is that not every process on the system 
should have access to the graphics device, so we need some type of 
security model to enforce that.

Note that this doesn't have to be an X Server...it could be a display 
compositing manager or other trusted entity and this entity would be 
responsible for verify proper access for other non-root processes and 
give them access when to the graphics hardware when appropriate.

-- 
                                /\
          Jens Owen            /  \/\ _
   jens-CdwZJljFklH+2FeEXyspIVaTQe2KTcn/@public.gmane.org  /    \ \ \   Steamboat Springs, Colorado