On 09/17/2017 04:30 PM, Adam Borowski wrote:
> On Sun, Sep 17, 2017 at 01:49:00PM -0400, fsmithred wrote:
>> - standard system install of debian stretch plus openbox, lxterminal,
>> lxpanel and a few other packages.
>> - changed sources to devuan ascii, update, add key, update again
>> - install sysvinit-core, reboot.
>> - [optional] install live-config-sysvinit to replace live-config-systemd
>> - remove libpam-systemd systemd systemd-shim
>> - apt-get autoremove
>
>> - install consolekit policykit-1 libpam-ck-connector (I don't know if
>> these were really needed. It seemed ok, but I'm using startx to get a
>> desktop.)
>
> policykit is needed only for letting an unprivileged user
> shutdown/suspend/etc from a GUI, mount removable media and such. It doesn't
> sound like you have an use for it.
>
>> - install xserver-xorg-legacy
>
> Bad idea! You'd want xserver-xorg-legacy only if you have a truly ancient
> graphics card or an {u,eu,...}dev misconfiguration wrt input (or run hurd).
>
> Obviously if for you the regular user is almost as sensitive as root anyway
> it's not a big concern, but if we stick to principles here we avoid training
> the user that making random things setuid is a good solution. With KVM,
> there's no need for X to run as root.
>
>
> Meow!
>

I removed xserver-xorg-legacy, commented out "needs_root..." and installed
a display manager (slim). X will run, but I'm confused about what part of
it should no longer be running as root. They look the same to me.



without xserver-xorg-legacy
without "needs_root_rights"
with display manager:

root      2583  0.0  0.1 128876 15964 ?        Ss   10:21   0:00
/usr/bin/slim -d
root      2605  0.1  0.5 296356 45832 tty7     Ssl+ 10:21   0:03
/usr/lib/xorg/Xorg -nolisten tcp -auth /var/run/slim.auth

with xserver-xorg-legacy
with "needs_root_rights"
without display manager:

user      2118  0.0  0.0   4288  1580 tty1     S+   15:07   0:00 /bin/sh
/usr/bin/startx
user      2141  0.0  0.0  22312  1144 tty1     S+   15:07   0:00 xinit
/etc/X11/xinit/xinitrc -- /etc/X11/xinit/xserverrc :0 vt1 -keeptty -auth
/tmp/serverauth.wP0Ynv4
root      2142  0.5  0.5 329932 45676 tty1     Sl   15:07   0:00
/usr/lib/xorg/Xorg -nolisten tcp :0 vt1 -keeptty -auth
/tmp/serverauth.wP0Ynv40Nd

fsmithred