Re: Interface binding - again...

Around 12 o'clock on May 10, Derek Fawcus wrote:

> What I've been thinking of was to remove _all_ code for
> binding to IPC other than local pipe / unix sockets from
> the server.

Yeah, I've had other people suggest this as well.  I think it's a sensible
idea as it would allow the initial connection negotiation and
authentication code to run as 'nobody' which would somewhat mitigate the
effect of any bugs in that exposed piece of code.

Plus, you could turn TCP connections on/off easily that way, instead of 
having to restart the X server, which would make it possible to have them 
disabled almost all of the time, without a huge cost to enable them in the 
rare event they're needed.

-keith

_______________________________________________
xserver mailing list
[email protected]
http://freedesktop.org/mailman/listinfo/xserver

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Exmh version 2.3.1 11/28/2001

iD8DBQFAoFNQQp8BWwlsTdMRAv5UAKDPgCnnP4ItU5nQco3D/i2lfuFmgQCcDJgD
aRdQeE2pOFvlHvQmI0+y0+I=
=OsMI
-----END PGP SIGNATURE-----