Red Hat Bugzilla – Bug 3706
font server dies without "su"
Last modified: 2008-05-01 11:37:50 EDT
Here is the init script that starts xfs: grep su /etc/init.d/xfs daemon --check xfs su xfs -c xfs -s /bin/sh touch /var/lock/subsys/xfs rm -f /var/lock/subsys/xfs if [ -f /var/lock/subsys/xfs ]; then daemon --check xfs su xfs -c xfs -s /bin/sh touch /var/lock/subsys/xfs We have no need for "su" on our systems and without it the font server dies. Then you must link the fonts manually. Is there a way to not have "su" on the system and still have the fontserver running?
you may run the font server as root, but this opens you up to security holes which you are trying to avoid. su is not a security hole, it has been thoroughly audited. Why are you removing it? The next release of our X packages will have XFree86-xfs depend on /bin/su. In the future, the xfs daemon may be rewritten so that it drops root privileges and becomes suid xfs / sgid xfs, but not for this release.
scratch that. our next release of X will enable xfs to drop root privileges and become the 'xfs' user if that user is present, if so specified. The init script will be adjusted accordingly. Thanks for the feedback.