Launch server X on hardened mode

[zouminski]

Hello,

i want to use X on a hardened mode. I try to run Xorg -configure in order to create a file xorg.conf :
it displays an I/O error. It needs to disable a flag on kernel : GKERNSEC_IO something like this.
I dont' want do disable it. I don't want to change my security mode. Anybody knows how can i bypass it ?

Cheers.

[Sadako]

At the moment, you can't really, the X server direct hardware access to function, which is exactly what GKERNSEC_IO is supposed to prevent, so it needs to be disabled for X to work.

On the other hand, you really don't lose much of the security benefits grsec provides by disabling GKERNSEC_IO anyway.

This may change in the future, when kernel mode setting (KMS) xorg drivers become more stable, and X can be run without root permissions (ie /usr/bin/Xorg won't need to be SUID any more).
_________________
"You have to invite me in"