diff options
| author | Koichiro IWAO <meta@vmeta.jp> | 2016-04-07 17:34:04 +0900 |
|---|---|---|
| committer | Koichiro IWAO <meta@vmeta.jp> | 2016-04-07 18:34:43 +0900 |
| commit | cf2b629462cfc9bf9b0b0d0b936f926c61938805 (patch) | |
| tree | 43b9fea5a9dca0fef720b276d739ca913ff21a61 /xrdp/xrdp_painter.c | |
| parent | fb08623b66c2ceda51d0867be5268268f3d59d56 (diff) | |
| download | xrdp-proprietary-cf2b629462cfc9bf9b0b0d0b936f926c61938805.tar.gz xrdp-proprietary-cf2b629462cfc9bf9b0b0d0b936f926c61938805.zip | |
sesman: do not hardcode Xorg/X11rdp/Xvnc executables
In RHEL and its clones, /usr/bin/Xorg is set suid-root. To execute
Xorg with user privileges, /etc/pam.d/xserver needs be edited [1],
or suid bit of Xorg binary needs to be dropped.
In order to keep Xorg and /etc/pam.d/xserver untouched, preparing
non-suid version of Xorg as /usr/bin/Xorg.non-suid for example is
the simplest solution. However, Xorg.non-suid cannot be executed
since it is hardcoded to execute Xorg in sesman.
This change makes more flexible to execute Xorg with non-standard
name or not in PATH environment variable.
[1] https://www.centos.org/forums/viewtopic.php?t=21185
Diffstat (limited to 'xrdp/xrdp_painter.c')
0 files changed, 0 insertions, 0 deletions