Commit Graph

4 Commits

Author SHA1 Message Date
landry
c4ea8f7c71 Update to slim 1.3.4.
- switch to cmake.
- add missing setusercontext() call in switchuser.cpp, now the ulimits
  are properly applied when logging in.
- add support for bsd_auth(3) through auth_userokay(3). Now allows to
  login via login_ldap/login_yubikey/etc...
- add support for consolekit, no need to do ck-launch-session in
  .xinitrc anymore.
- make consolekit support at runtime optional, ie don't badly bail out
  if systemwide dbus daemon is not running. Being discussed with
upstream.
parts based on a diff from 'johnw', ok ajacoutot@
2012-09-02 09:22:59 +00:00
landry
03675d01db Update to slim 1.3.2, fixes a security issue (removes . from
default_path, sometimes inherited by some window managers)
ref: http://secunia.com/advisories/41005
Removes patches merged upstream. Amend MESSAGE to teach users
who modified slim.conf how to fix it there.
Prompted by and ok jasper@
2010-08-24 11:37:50 +00:00
armani
23c1e9460e Add a fix from Freebsd :
x11/slim, does not setlogin(). Some software use getlogin()
 to decide the user name, so when user is using slim as the
 login manager, those software would get wrong results, and
 some programs refuse to start

(Seen with opencvs some times ago, reminded by a discution
with zinovik and theo and setlogin hint from guenter)

ok maintainer & dcoppa@
2010-07-10 10:46:52 +00:00
landry
b6a02eab6a Add a bunch of patches to fix CVE-2009-1756, also reported in debian bz
#529306 & FreeBSD PR134801 :
The security issue is caused by slim generating the X authority file
by passing the X authority cookie via the command line to "xauth".
This can be exploited to disclose the X authority cookie by consulting
the process list and e.g. gain access the user's display.
While here, use slightly better random seeding for cookie generation.

Patches adapted from the ones provided to debian/FreeBSD by Eygene Ryabinkin <rea@codelabs.ru>
2009-09-04 20:24:25 +00:00