V X.Org bylo nalezeno a opraveno celkem třináct bezpečnostních chyb (CVE-2014–8091 až CVE-2014–8103). Zranitelnosti mohou být zneužity k přístupu k neinicializované paměti nebo přepsání libovolné paměti X serveru. Útočník tím může dosáhnout Denial of Service nebo podstrčit svůj kód, který bude posléze vykonán. Nejstarší nalezený a opravený bug pochází z roku 1987.
(Zdroj: X.Org)
V OpenBSD se podarilo upravit Xorg aby bezely s pravy neprivilegovaneho uzivatele. Tohle bych rad videl i pro Linux a nejaky Wayland mi pak muze byt u zadele. Bez sitove transparentnosti je pro me stejne nepouzitelny.
ide to, ale s obmedzenim na OSS ovladace... Proprietarne to nremaju ani jedny (zatial)..
For video drivers that support kernel mode-setting (KMS), X can be set up to run as a non-root user.
X/Rootless (poslednú editáciu z 2010-07-11 11:42:00 uskutočnil georgegesslein)
https://wiki.ubuntu.com/X/Rootless
Published on 10 October 2014 1:00 PM EDT
NVIDIA is currently working on its driver code to support the mainline Linux KMS (Kernel Mode-Setting) infrastructure,
NVIDIA's binary blob isn't using the KMS API directly but their display code is working to register with DRM and for its kernel driver to support using the KMS ioctls
Meanwhile AMD Catalyst support for Mir/Wayland won't come until AMD unifies Catalyst with their new open-source driver. Then the two AMD drivers will be using AMDGPU KMS/DRM driver and Wayland/Mir should work with the Catalyst user-space blob
http://www.phoronix.com/scan.php?page=news_item&px=MTgxMDE
AMD's New GPU Kernel Driver Could Be Too Late For Linux 3.19
Linux Kernel
Published on 02 November 2014
it's a bit worrisome that we might not now see the initial AMDGPU driver merged to mainline until at least Linux 3.20 in 2015.
http://www.phoronix.com/scan.php?page=news_item&px=MTgyODg
