http://bugzilla.novell.com/show_bug.cgi?id=561074 http://bugzilla.novell.com/show_bug.cgi?id=561074#c1 Stefan Dirsch changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED CC| |security-team@suse.de Resolution| |INVALID --- Comment #1 from Stefan Dirsch 2009-12-05 12:39:52 UTC --- So any user on your system has access to your X display? Do you care about privacy/security? Apparently you don't. Instead these applications should be fixed if it's really a bug in these applications. For me it sounds as if you start these applications as a different user, but this user does not have access to your display. Don't get me wrong, I believe it's fine to start 3rd party applications as a different user, but then you need to take care about access to your display yourself. Using 'su <username>' is one option. It adds the appropriate cookie using xauth. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=561074 http://bugzilla.novell.com/show_bug.cgi?id=561074#c3 Ilya Chernykh changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|INVALID | --- Comment #3 from Ilya Chernykh 2009-12-05 17:49:37 UTC --- See above. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=561074 http://bugzilla.novell.com/show_bug.cgi?id=561074#c6 --- Comment #6 from Ilya Chernykh 2009-12-05 18:21:09 UTC --- At least there should be such option GUI settings to make the system easily compatible with those apps. Anyway why do you insist that it creates a security hole? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.