Ron Parker wrote:

> It's possible that they chose not to include it because it has to be
> setuid root to work.  As such, it's a security hole big enough to drive a
> fleet of aircraft carriers through.

Not an issue for a standalone, single-user box that doesn't live on the
'net. ;-) 
 
I guess I just don't understand much about (SVGA) graphics:  why is
there this apparent connection?  There are quite a few apps out there,
if I'm not mistaken, that require 1) SVGA and 2) to be run setuid root. 
Yet I can use a console-based graphic file viewer called zgv that can be
run as regular joe-user.

--Mark

Post a reply to this message