sm-commit AT lists.ibiblio.org
Subject: Source Mage code commit list
List archive
[[SM-Commit] ] GIT changes to master grimoire by Thomas Orgis (38eb4e05cc1d1f7dcb09932f4dc7c69e5df354bb)
- From: Thomas Orgis <scm AT sourcemage.org>
- To: sm-commit AT lists.ibiblio.org, sm-commit AT lists.sourcemage.org
- Subject: [[SM-Commit] ] GIT changes to master grimoire by Thomas Orgis (38eb4e05cc1d1f7dcb09932f4dc7c69e5df354bb)
- Date: Fri, 1 Nov 2024 10:23:28 +0000
GIT changes to master grimoire by Thomas Orgis <sobukus AT sourcemage.org>:
xorg/xserver/BUILD | 1 +
xorg/xserver/CONFIGURE | 2 +-
xorg/xserver/DETAILS | 2 +-
xorg/xserver/HISTORY | 4 ++++
4 files changed, 7 insertions(+), 2 deletions(-)
New commits:
commit 38eb4e05cc1d1f7dcb09932f4dc7c69e5df354bb
Author: Thomas Orgis <sobukus AT sourcemage.org>
Commit: Thomas Orgis <sobukus AT sourcemage.org>
xserver: add option for X11 Security extension
This has been disabled by default upstream, but is still assumed in a
default
build of ssh for the -X option as opposed to -Y (ForwardX11Trusted).
You may debate that X11 forwarding is bad and the protections in place by
untrusted forwarding are inadequate ... but better nothing if not perfect?
Let the user decide.
diff --git a/xorg/xserver/BUILD b/xorg/xserver/BUILD
index e49aee5..4e0c480 100755
--- a/xorg/xserver/BUILD
+++ b/xorg/xserver/BUILD
@@ -4,6 +4,7 @@ OPTS+=" xorg=$XSERVER_XORG \
xnest=$XSERVER_XNEST \
xvfb=$XSERVER_XVFB \
xselinux=${XSERVER_SELINUX} \
+ xcsecurity=${XSERVER_SECURITY} \
xephyr=$XSERVER_XEPHYR \
glamor=$XSERVER_GLAMOR \
listen_tcp=$XSERVER_TCP \
diff --git a/xorg/xserver/CONFIGURE b/xorg/xserver/CONFIGURE
index b6fd585..6306ca9 100755
--- a/xorg/xserver/CONFIGURE
+++ b/xorg/xserver/CONFIGURE
@@ -14,5 +14,5 @@ config_query_option XSERVER_XEPHYR "Build Xephyr nested X
server?" n true false
config_query_option XSERVER_GLAMOR "build Glamor" y true false &&
config_query_option XSERVER_TCP "listen on TCP" n true false &&
config_query_option XSERVER_SELINUX "Build XSELINUX" n true false &&
+config_query_option XSERVER_SECURITY "Build Security extension (for
untrusted X11 forwarding via ssh)" n true false &&
config_query_option XSERVER_WRAP "Build suid-root wrapper for legacy
driver support" n true false
-
diff --git a/xorg/xserver/DETAILS b/xorg/xserver/DETAILS
index 08c6892..4a81a1a 100755
--- a/xorg/xserver/DETAILS
+++ b/xorg/xserver/DETAILS
@@ -3,7 +3,7 @@ source $GRIMOIRE/MESON_FUNCTIONS
SPELL=xserver
SPELLX=xorg-server
VERSION=21.1.8
- PATCHLEVEL=1
+ PATCHLEVEL=2
SECURITY_PATCH=20
SOURCE=$SPELLX-$VERSION.tar.xz
SOURCE_URL[0]=https://xorg.freedesktop.org/releases/individual/xserver/$SOURCE
diff --git a/xorg/xserver/HISTORY b/xorg/xserver/HISTORY
index 62012a7..b8a3f0e 100644
--- a/xorg/xserver/HISTORY
+++ b/xorg/xserver/HISTORY
@@ -1,3 +1,7 @@
+2024-11-01 Thomas Orgis <sobukus AT sourcemage.org>
+ * CONFIGURE, BUILD: add option to enable Security extension
+ * DETAILS: ++PATCHLEVEL
+
2023-12-19 Thomas Orgis <sobukus AT sourcemage.org>
* CONFIGURE, BUILD: option for suid wrapper for logind-less operation
(and without permanent permission for users on input devices)
- [[SM-Commit] ] GIT changes to master grimoire by Thomas Orgis (38eb4e05cc1d1f7dcb09932f4dc7c69e5df354bb), Thomas Orgis, 11/01/2024
Archive powered by MHonArc 2.6.24.