Bug 27726 - hw/xfree86/Makefile.am relies on superuser being named 'root'
Summary: hw/xfree86/Makefile.am relies on superuser being named 'root'
Status: RESOLVED FIXED
Alias: None
Product: xorg
Classification: Unclassified
Component: Server/DDX/Xorg (show other bugs)
Version: git
Hardware: All All
: medium minor
Assignee: Xorg Project Team
QA Contact: Xorg Project Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-04-18 11:17 UTC by Michał Górny
Modified: 2018-06-12 17:22 UTC (History)
0 users

See Also:
i915 platform:
i915 features:


Attachments
The proposed solution (1.07 KB, patch)
2010-04-18 11:20 UTC, Michał Górny
no flags Details | Splinter Review

Description Michał Górny 2010-04-18 11:17:40 UTC
The Makefile of the Xorg server component during the 'install' phase tries to change the ownership of the Xorg binary being installed to the 'root' user.

But in fact, there's no requirement that superuser has to be named 'root'. This means that if the superuser is named differently, the 'make install' call is either going to fail (because of non-existent user) or, even worse, the file could be installed as non-superuser user named 'root' (use of this name is perfectly legit too).

The issue should be fixed through replacing the 'root' user specification with explicit UID 0 one.
Comment 1 Michał Górny 2010-04-18 11:20:47 UTC
Created attachment 35146 [details] [review]
The proposed solution
Comment 2 Adam Jackson 2018-06-12 17:22:23 UTC
commit 5c95be38e5af28108d8c6c08dfe08d1dfcb7ed42
Author: Michał Górny <gentoo@mgorny.alt.pl>
Date:   Mon Jun 11 17:17:31 2018 -0400

    xfree86: Makefile shouldn't rely on superuser being named 'root'
    
    Change the 'chown' statement in Makefile.am to use the numeric UID
    of superuser instead of relying on the name 'root'.
    
    Bugzilla: https://bugs.freedesktop.org/27726
    Signed-off-by: Adam Jackson <ajax@redhat.com>
    Signed-off-by: Michał Górny <gentoo@mgorny.alt.pl>
    Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net>


Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.