Re: SecurityFocus Article

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Ed White wrote:
The big problem is that the attack is possible thanks to the way X Windows is designed,

No, it's due to the implementation of the common X servers and OS'es on
x86 and similar platforms.   Many X servers on other platforms always had
the critical parts of the drivers in the kernel - for instance on Solaris
SPARC, Xsun doesn't run with root permissions at all since the kernel drivers
do all the work.   Various other "old school" Unixes did the same - it works
well when you have a single body controlling the hardware, drivers & X server.

and so the only way to eradicate it is to redesign it, moving video card driver
> into the kernel,

Which kernel?   You wrote to XFree86 which runs on a wide range of kernels
with the same user-space drivers.   Would you move those into the Linux,
NetBSD, OpenBSD, FreeBSD, GNU Hurd, Solaris, and all other supported kernels,
multiplying the number of drivers maintained by the number of kernels
supported?   What about kernels like Linux where the interfaces change between
versions regularly?    Or would you instead try to create some sort of common
driver layer you insert into all of them and just have the headache of
maintaining that for all supported kernels/versions?

--
	-Alan Coopersmith-           alan.coopersmith@xxxxxxx
	 Sun Microsystems, Inc. - X Window System Engineering
_______________________________________________
XFree86 mailing list
XFree86@xxxxxxxxxxx
http://XFree86.Org/mailman/listinfo/xfree86

[Index of Archives]     [X Forum]     [Xorg]     [XFree86 Newbie]     [IETF Announce]     [Security]     [Font Config]     [Bugtraq]     [Yosemite]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux Kernel]

  Powered by Linux