From unknown Sat Aug 16 22:46:10 2025 X-Loop: help-debbugs@gnu.org Subject: bug#57071: Xscreensaver not working since latest patch Resent-From: Rick Huijzer Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Tue, 09 Aug 2022 10:28:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 57071 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 57071@debbugs.gnu.org X-Debbugs-Original-To: bug-guix@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.166004088024979 (code B ref -1); Tue, 09 Aug 2022 10:28:02 +0000 Received: (at submit) by debbugs.gnu.org; 9 Aug 2022 10:28:00 +0000 Received: from localhost ([127.0.0.1]:42618 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1oLMSt-0006Uh-C6 for submit@debbugs.gnu.org; Tue, 09 Aug 2022 06:28:00 -0400 Received: from lists.gnu.org ([209.51.188.17]:41936) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1oLKEH-0000Z9-2g for submit@debbugs.gnu.org; Tue, 09 Aug 2022 04:04:48 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:51038) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1oLKEE-0005Yg-Va for bug-guix@gnu.org; Tue, 09 Aug 2022 04:04:44 -0400 Received: from mail-ej1-x629.google.com ([2a00:1450:4864:20::629]:35787) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1oLKEA-0003zq-JQ for bug-guix@gnu.org; Tue, 09 Aug 2022 04:04:42 -0400 Received: by mail-ej1-x629.google.com with SMTP id a7so20861657ejp.2 for ; Tue, 09 Aug 2022 01:04:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=to:subject:message-id:date:from:mime-version:from:to:cc; bh=JJB6qutlG1s1+XNJwjY8lbiSMfCLJUtQxW5/PCaPA3E=; b=D76fsGTNJcWuKjayxKZpn19zzcKSgJPX5yP4kJBn3Pj6pr8KZDXKtp8ftXZhUgPzSl N3Fb9tfh9GoL+hgqMwhWIGiRCvg8pJkrzAHhmtyzNCZgNGqWw2eUF9ciJKz+fPEcgph1 LBKyzmAVBY5id0m89bRV5PLoOe1h96FRjOFV3iYUUz8/2TF/2aGd6doCAHw7zkCj4+l/ tDEFBmqQ2p3Rmef/pGdoDZaheV1jJIox25Sepk97ilYSmf0BQIRPH5McUXEZCRaYtvT0 Pf5e0c3pzGa2icJEYG5XYg8W0rlsCjXNxcm24DVqzIsxP2isWgaC39s7hm3AREam60dx 7WWw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc; bh=JJB6qutlG1s1+XNJwjY8lbiSMfCLJUtQxW5/PCaPA3E=; b=VbBsAPZ2/qqnoZK1z741M2FR6uDTXRdfwQgU1gxgYtKvRh9w2kNqm+cTomXhB7Dety H3vK9kUVcklh8xvcfHcZNqf61sKtf8MZWIgJtat2PZ4XLXAX2SgFwbN08lvo8tRb6T6f OtekqYu4D+2dMWfaADqnmm5eckv4URcKEDTdXnJff+Dtnc0cm1CgevseJsQFrti83qLU B40PXH3FxSQjHBKiJvUZ92D+q6WyXCSYjQxrjUW+sC3X8PuK8Xahu58J3rqGZs40Jimc IsDMcKWrFeugX1hDxA2+MT90YJX1APdT9HbCAWcHwzBIPDtTQrA7+XHj9NHIfHbrCNxU m5lQ== X-Gm-Message-State: ACgBeo1R3NVyNOtDwt6u/mmjU/bzh0Q64Rm+UrOTwCmNCob4X642Vnmy U6SP5l5f5A9rD4cOhJTFWwZfjT8hn1ml2ucF2aOS8WJI X-Google-Smtp-Source: AA6agR711ypRAn4vQRaaX3GVDsM1VkmXGGRKF/tqucwv049xXKZynQ+MQlMPQdzA9eKHJE36i4C5ueH44ZR3XILmQ+g= X-Received: by 2002:a17:906:ef8c:b0:730:e4e0:1f69 with SMTP id ze12-20020a170906ef8c00b00730e4e01f69mr14887129ejb.113.1660032268225; Tue, 09 Aug 2022 01:04:28 -0700 (PDT) MIME-Version: 1.0 From: Rick Huijzer Date: Tue, 9 Aug 2022 10:04:17 +0200 Message-ID: Content-Type: multipart/alternative; boundary="000000000000a9d40205e5ca615f" Received-SPF: pass client-ip=2a00:1450:4864:20::629; envelope-from=ikbenrickhuyzer@gmail.com; helo=mail-ej1-x629.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.3 (-) X-Mailman-Approved-At: Tue, 09 Aug 2022 06:27:56 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) --000000000000a9d40205e5ca615f Content-Type: text/plain; charset="UTF-8" Hi, The latest xscreensaver patch rendered xscreensaver unusable on my systems. When I try to unlock my screen I am greeted with the message 'xscreensaver: don't login as root', even though I don't invoke it as root. $xscreensaver-command -lock Aug 9 08:45:22 localhost shepherd[1]: [slim] xscreensaver-gfx: 08:45:22: 1: running as root: not launching hacks. Aug 9 09:10:29 localhost shepherd[1]: [slim] xscreensaver-command: locking Aug 9 09:10:32 localhost shepherd[1]: [slim] xscreensaver-gfx: 09:10:32: 0: running as root: not launching hacks. When I remove the (screen-locker-service xscreensaver) I run into all kinds of set-uid problems. I will happily provide more information if needed. -- Met vriendelijke groet, Rick Huijzer --000000000000a9d40205e5ca615f Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi,=C2=A0

The latest xscreensaver patch=C2=A0r= endered xscreensaver unusable on my systems. When I try to unlock my screen= I am greeted with the message 'xscreensaver: don't login as root&#= 39;, even though I don't invoke it as root.=C2=A0

<= div>
$xscreensaver-command -lock
Aug =C2=A09 08= :45:22 localhost shepherd[1]: [slim] xscreensaver-gfx: 08:45:22: 1: running= as root: not launching hacks.
Aug =C2=A09 09:10:29 localhost shepherd[1= ]: [slim] xscreensaver-command: locking
Aug =C2=A09 09:10:32 localh= ost shepherd[1]: [slim] xscreensaver-gfx: 09:10:32: 0: running as root: not= launching hacks.

When I remove the=C2=A0
(screen-locker-service xscreensaver)
I run into all kin= ds of set-uid problems.=C2=A0

I will happily=C2=A0= provide more information if needed.

--
Met vriendelijke groet,

Rick Huijzer

<= /div>
--000000000000a9d40205e5ca615f-- From unknown Sat Aug 16 22:46:10 2025 X-Loop: help-debbugs@gnu.org Subject: bug#57071: Xscreensaver not working since latest patch Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Tue, 09 Aug 2022 21:32:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 57071 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Rick Huijzer Cc: r0man , 57071@debbugs.gnu.org Received: via spool by 57071-submit@debbugs.gnu.org id=B57071.16600806699626 (code B ref 57071); Tue, 09 Aug 2022 21:32:02 +0000 Received: (at 57071) by debbugs.gnu.org; 9 Aug 2022 21:31:09 +0000 Received: from localhost ([127.0.0.1]:45328 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1oLWof-0002VC-23 for submit@debbugs.gnu.org; Tue, 09 Aug 2022 17:31:09 -0400 Received: from eggs.gnu.org ([209.51.188.92]:56784) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1oLWod-0002Ur-Fm for 57071@debbugs.gnu.org; Tue, 09 Aug 2022 17:31:07 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:47632) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1oLWoY-0001od-20; Tue, 09 Aug 2022 17:31:02 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=MIME-Version:In-Reply-To:Date:References:Subject:To: From; bh=hEjpbY8zv2PmpU8WUZfxS+2BjvT9JJyrK5qVFRbKFWc=; b=eWLatwZSXh/7mvaECucM GxYcEV5P8rl8Y/hSlWqH5LnfLfJ5Oogq1b47XC/fxSt4kMJ5liUlzvjST7ublAsxKvp3eSMvwOj5J O2Tbdn5qW0AQSwiesaRfkSbSc3+fdvCa1isyl1pEVelsj5qYXD0AM1c0JOCvD5ubfdc2IIZww3/83 AlZDpkbpE6sQ4LYb0tqh+eRpPWhdrKRsgHefV5AEijIgrWD4aCIfvnxov/VgYOgsaTPEPj6djKges FZSBf/9p8noDqQKxKgl7rN76hSymtaqB1gjWRieH5gJZRJMpbBZic3r07M693vkI/ZbnImxktosvI rf9XjQ9WUUPb9A==; Received: from 91-160-117-201.subs.proxad.net ([91.160.117.201]:60821 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1oLWoW-0005lg-HG; Tue, 09 Aug 2022 17:31:01 -0400 From: Ludovic =?UTF-8?Q?Court=C3=A8s?= References: Date: Tue, 09 Aug 2022 23:30:58 +0200 In-Reply-To: (Rick Huijzer's message of "Tue, 9 Aug 2022 10:04:17 +0200") Message-ID: <87zggd14vh.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Hi Rick, Rick Huijzer skribis: > The latest xscreensaver patch rendered > xscreensaver unusable on my systems. When I try to unlock my screen I am > greeted with the message 'xscreensaver: don't login as root', even though= I > don't invoke it as root. > > > $xscreensaver-command -lock > Aug 9 08:45:22 localhost shepherd[1]: [slim] xscreensaver-gfx: 08:45:22: > 1: running as root: not launching hacks. > Aug 9 09:10:29 localhost shepherd[1]: [slim] xscreensaver-command: locki= ng > Aug 9 09:10:32 localhost shepherd[1]: [slim] xscreensaver-gfx: 09:10:32: > 0: running as root: not launching hacks. > > When I remove the > (screen-locker-service xscreensaver) > I run into all kinds of set-uid problems. Sorry about that, I built it during review but did not actually run it. One effect of =E2=80=98screen-locker-service=E2=80=99 is to make the progra= m setuid-root so that it can authenticate users. It would seem that something changed in xscreensaver in that area; quoth =E2=80=98driver/subprocs.c=E2=80=99: --8<---------------cut here---------------start------------->8--- if (getuid() =3D=3D (uid_t) 0 || geteuid() =3D=3D (uid_t) 0) /* Prior to XScreenSaver 6, if running as root, we would change the effective uid to the user "nobody" or "daemon" or "noaccess", but even that was just encouraging bad behavior. Don't log in as root. */ { fprintf (stderr, "%s: %d: running as root: not launching hacks.\n= ", blurb(), ssi->number); screenhack_obituary (ssi, "", "XScreenSaver: Don't log in as root= ."); goto DONE; } --8<---------------cut here---------------end--------------->8--- OTOH the =E2=80=98disavow_privileges=E2=80=99 function is supposed to drop = root privileges early on. So I=E2=80=99m not sure how it=E2=80=99s supposed to be run. R0man, ideas? Thanks, Ludo=E2=80=99. From unknown Sat Aug 16 22:46:10 2025 X-Loop: help-debbugs@gnu.org Subject: bug#57071: Xscreensaver not working since latest patch Resent-From: Roman Scherer Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Wed, 10 Aug 2022 07:15:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 57071 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Ludovic =?UTF-8?Q?Court=C3=A8s?= Cc: 57071@debbugs.gnu.org, Rick Huijzer Received: via spool by 57071-submit@debbugs.gnu.org id=B57071.166011569321561 (code B ref 57071); Wed, 10 Aug 2022 07:15:01 +0000 Received: (at 57071) by debbugs.gnu.org; 10 Aug 2022 07:14:53 +0000 Received: from localhost ([127.0.0.1]:45851 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1oLfvZ-0005bg-Eu for submit@debbugs.gnu.org; Wed, 10 Aug 2022 03:14:53 -0400 Received: from mail-ed1-f47.google.com ([209.85.208.47]:37555) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1oLfvU-0005bP-H6 for 57071@debbugs.gnu.org; Wed, 10 Aug 2022 03:14:52 -0400 Received: by mail-ed1-f47.google.com with SMTP id b16so17897721edd.4 for <57071@debbugs.gnu.org>; Wed, 10 Aug 2022 00:14:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=burningswell-com.20210112.gappssmtp.com; s=20210112; h=mime-version:message-id:in-reply-to:date:subject:cc:to:from :user-agent:references:from:to:cc; bh=BZo3zzYEVsOvIYaT2ynHbmk4UtUudybjQgy92XDhoXY=; b=QTUMu8WzomYDLihtWEDHKVmFSNYhBTLHuAxnv3dz6UoSW9pbV+Zh2CgJIDhuZW7tLw Lsm1r7zwWEnB/Ii6gMfo0sL3CgzjHAUO+zympzkNEF0xKA/mkZ4p7E4HgAgtYglwl7bU nWI8anOkGOcXs3YVioVY+dsMoHNtwuQibLxBjVECJc3KgkTHNNNMxGjPy3tjmsdlDsx+ AjqFX3aDIW1dDIFqNgDpFKigIAPxEhZ+bv1RSRgAeZj6aIwbwjN+ZXQd2hlYVwEbYCgC FnOmCKI1vm6AC7MZgfKLL8G37zPj+bSAY0yGn3EU9GbTFG1OI/SiOIsR1PompVwYVgrD 48HA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=mime-version:message-id:in-reply-to:date:subject:cc:to:from :user-agent:references:x-gm-message-state:from:to:cc; bh=BZo3zzYEVsOvIYaT2ynHbmk4UtUudybjQgy92XDhoXY=; b=XJo2PA9pUaAumqV2X/osIuIsRJv0H+bn6zDhLsFTxkkLqNAOLeqJ4tfHo/NMKI2jBk W9fbBB3iCTSLKFKES/ukjtfm6LmgAbY9s2ahrHstX9RjADWlfWfVC3Xg6IUfMxXjupbK lLrDn0L4gOC4Q96BI07uFdI3XPtq3Mz7ASTXMTpXANL/Up0nXy/0T3a/JwnEspygZeH9 exU3zOXcdEGxECeeAilHK4Jx+tAxxHn0F3GXsxnxP2rkfKwZ5cLsUulbYKY+rT8Agcw5 MutQv4P6UoLgbOcLjeRDrQtpU9gqN7kGPmRHpfg6ll3SaTW1UBPHi4IM9rhjZDQdqwt0 fbxg== X-Gm-Message-State: ACgBeo0m5/deqEElIQLm/BaSGrY1IYUMxbBQ/2zrt8kvs359JGmNlW8Z ek6k7Znh1SBwTemEhLBF5EcJJDRjyj96yVbC X-Google-Smtp-Source: AA6agR516jFqXdF5BMNu6CktZTojFmdksi+NoCFyr9kFKy6mrOhbfclDN2GzwM8ltPhn40DLxdqjPw== X-Received: by 2002:a05:6402:1159:b0:43b:bc82:5ddb with SMTP id g25-20020a056402115900b0043bbc825ddbmr25056105edw.355.1660115682264; Wed, 10 Aug 2022 00:14:42 -0700 (PDT) Received: from precision (tmo-116-169.customers.d1-online.com. [80.187.116.169]) by smtp.gmail.com with ESMTPSA id b16-20020aa7c6d0000000b0043bb8023caesm7115463eds.62.2022.08.10.00.14.40 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 10 Aug 2022 00:14:41 -0700 (PDT) References: <87zggd14vh.fsf@gnu.org> User-agent: mu4e 1.8.7; emacs 28.1 From: Roman Scherer Date: Wed, 10 Aug 2022 06:37:47 +0000 In-reply-to: <87zggd14vh.fsf@gnu.org> Message-ID: <87bksstvs0.fsf@burningswell.com> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi Ludo and Rick, sorry for the trouble. I'm running xscreensaver on a foreign distro and did not notice this. Probably because somehow my screen wasn't locked, but still showing random screensavers. However, now that I tried the `xscreensaver-command -lock` command I see a dialog with a "Password initialization failed" message. The xscreensave logs also show this: xscreensaver-auth: 06:45:55: OOM: /proc/99677/oom_score_adj: Permission den= ied xscreensaver-auth: 06:45:55: To prevent the kernel from randomly unlocking xscreensaver-auth: 06:45:55: your screen via the out-of-memory killer, xscreensaver-auth: 06:45:55: "xscreensaver-auth" must be setuid root. xscreensaver-auth: 06:46:06: PAM: warning: /etc/pam.d/xscreensaver does not= exist. xscreensaver-auth: 06:46:06: PAM: password authentication is unlikely to wo= rk. xscreensaver-auth: 06:46:15: PAM: warning: /etc/pam.d/xscreensaver does not= exist. xscreensaver-auth: 06:46:15: PAM: password authentication is unlikely to wo= rk. When the dialog popped up, I had to switch to a terminal and kill xscreensaver to be able to access my desktop again. Should we revert it, until we figured out what's necesarry to get this working again? r0man Ludovic Court=C3=A8s writes: > Hi Rick, > > Rick Huijzer skribis: > >> The latest xscreensaver patch render= ed >> xscreensaver unusable on my systems. When I try to unlock my screen I am >> greeted with the message 'xscreensaver: don't login as root', even thoug= h I >> don't invoke it as root. >> >> >> $xscreensaver-command -lock >> Aug 9 08:45:22 localhost shepherd[1]: [slim] xscreensaver-gfx: 08:45:22: >> 1: running as root: not launching hacks. >> Aug 9 09:10:29 localhost shepherd[1]: [slim] xscreensaver-command: lock= ing >> Aug 9 09:10:32 localhost shepherd[1]: [slim] xscreensaver-gfx: 09:10:32: >> 0: running as root: not launching hacks. >> >> When I remove the >> (screen-locker-service xscreensaver) >> I run into all kinds of set-uid problems. > > Sorry about that, I built it during review but did not actually run it. > > One effect of =E2=80=98screen-locker-service=E2=80=99 is to make the prog= ram setuid-root > so that it can authenticate users. It would seem that something changed > in xscreensaver in that area; quoth =E2=80=98driver/subprocs.c=E2=80=99: > > if (getuid() =3D=3D (uid_t) 0 || geteuid() =3D=3D (uid_t) 0) > /* Prior to XScreenSaver 6, if running as root, we would change t= he > effective uid to the user "nobody" or "daemon" or "noaccess", > but even that was just encouraging bad behavior. Don't log in > as root. */ > { > fprintf (stderr, "%s: %d: running as root: not launching hacks.= \n", > blurb(), ssi->number); > screenhack_obituary (ssi, "", "XScreenSaver: Don't log in as ro= ot."); > goto DONE; > } > > OTOH the =E2=80=98disavow_privileges=E2=80=99 function is supposed to dro= p root > privileges early on. > > So I=E2=80=99m not sure how it=E2=80=99s supposed to be run. R0man, idea= s? > > Thanks, > Ludo=E2=80=99. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQFTBAEBCAA9FiEE0iajOdjfRIFd3gygPdpSUn0qwZkFAmLzWt8fHHJvbWFuLnNj aGVyZXJAYnVybmluZ3N3ZWxsLmNvbQAKCRA92lJSfSrBmaSOB/9u9HaRe7vhzC6K KYg64KiAb6+kr1f2HD5Xmxe9q7ZTGJwgwkzAe/PvcYbhKHnDIxYOUwVthNvuDIPC hyPnFepXstTGRvfwCIofm5EGWgosnRGQdbOIXHolPieX2uvTUw6ak16mwcgIH/3Y l3BGLsR5qJjIvGfOATgUbSGRHV+/qzo5bnADUb65LDUH19BNQ/TYAQp4zy+NK1RN xM3yD7qP7mYdkG21iv+6IbkGoujY9Y80IYOpdSISgmibPuQvnQxR9oh3/7aaEGuY RtDvq/7CQF1aekfD2nxFpulYliE2j4f6Wa0N32EGuNk3xuO+LoeMgYQkCP8ioeEC F79jnFLw =u4Rj -----END PGP SIGNATURE----- --=-=-=-- From unknown Sat Aug 16 22:46:10 2025 X-Loop: help-debbugs@gnu.org Subject: bug#57071: Xscreensaver not working since latest patch Resent-From: Rick Huijzer Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Wed, 10 Aug 2022 12:31:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 57071 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Roman Scherer , ludo@gnu.org, 57071@debbugs.gnu.org Received: via spool by 57071-submit@debbugs.gnu.org id=B57071.166013464330959 (code B ref 57071); Wed, 10 Aug 2022 12:31:03 +0000 Received: (at 57071) by debbugs.gnu.org; 10 Aug 2022 12:30:43 +0000 Received: from localhost ([127.0.0.1]:46759 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1oLkrC-00083C-VP for submit@debbugs.gnu.org; Wed, 10 Aug 2022 08:30:43 -0400 Received: from mail-ej1-f47.google.com ([209.85.218.47]:33648) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1oLkIU-0006mq-AZ for 57071@debbugs.gnu.org; Wed, 10 Aug 2022 07:54:52 -0400 Received: by mail-ej1-f47.google.com with SMTP id uj29so27372179ejc.0 for <57071@debbugs.gnu.org>; Wed, 10 Aug 2022 04:54:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :from:to:cc; bh=hDZCOTv2BfznM9ThgpdVZ+yd+pDuUW4cUZlEa0ErZSk=; b=qYB6EJzRaBnFLulCwOGOhQIiX3XGl0uyoDyRxRQUsSNodYdvVJ3Albty7JZgFJMz28 94wZhcRF7DiyyAzJv3MmSs0gqPokS8exaHQCf1jEMx8Wyhs/p5jY4hWoPgfEMR8bou2V K7p8xaXjcYK5DBRHVwPOCTyKi1E1uySz1EN3kXvzkgJ3ZyMjcK0ouBuh4Y95Bl31KEkf 8PMrRXU6XSdyDI4mgM8D32rzSO4icyY+KPWKlV2ksmdzCtiv4x8aP/zY87rc9JYMaCvm +yEpkd0wLKXpjKnQl3XiOQ4zy8Tdtahlit8lGj/Vbm8bleBh/zrt4VcKE6pnMSwHyIU+ J1UQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :x-gm-message-state:from:to:cc; bh=hDZCOTv2BfznM9ThgpdVZ+yd+pDuUW4cUZlEa0ErZSk=; b=4aVIlcAeZjcu9Z1leFqPoQz7KTmm7RPsaSqHgSpjAuEQWiTHhub2DH7Kgn9zkR++zm DGHUtEgxEx/m383s1rX/tnF5fBlz9Bl1OSQ3OwkdFovi7VcVOrxW4k7kPbgVRs6huYhs M5JTplUi57OwJEbUZGUHU8pcop1J0EV8HYM2rFkG1Q63EGw1yWO2OFCpi7L29uwhCKM1 B0GrV9R/WZ8wPHBxh4g012SNG4Jnqm9I68Fp+cREpcTTHTPOyxRwJN1VjB+x+eqKHZO2 keLKn2iC0HTwJH6hkGUusz39cbA3ENqszVNVnniPruvJGqJjNpXPLkGxKY7OXAJVfklz UWpg== X-Gm-Message-State: ACgBeo2koIqOSVOaqdj8kwdm8pYnIDhJa67T2+5tKLmHlzHiS2DLozwM sEJVYFVOCBK/0N5hqHaRe9rTpZbqnkx3IW9SrKM= X-Google-Smtp-Source: AA6agR66r6wuSqKVYHXW+R8LfE9hgk340TKvuzccjH/9K2rcauQdfePNkCf4TwLBZ3z4spESw500OxwToNzTYI4z6Ds= X-Received: by 2002:a17:906:8461:b0:730:a43a:9981 with SMTP id hx1-20020a170906846100b00730a43a9981mr19735301ejc.552.1660132484334; Wed, 10 Aug 2022 04:54:44 -0700 (PDT) MIME-Version: 1.0 References: <87zggd14vh.fsf@gnu.org> <87bksstvs0.fsf@burningswell.com> In-Reply-To: <87bksstvs0.fsf@burningswell.com> From: Rick Huijzer Date: Wed, 10 Aug 2022 13:54:33 +0200 Message-ID: Content-Type: multipart/alternative; boundary="00000000000002486005e5e1b735" X-Spam-Score: 0.0 (/) X-Mailman-Approved-At: Wed, 10 Aug 2022 08:30:40 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) --00000000000002486005e5e1b735 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Roman and Ludo, It seems that xscreensaver-auth needs to be setuid instead of the main xscreensaver binary. The screen-locker-service in xorg.scm sets the provided package setuid and sets the required pam configuration for the provided package. The problem is that the pam configuration needs to be set for xscreensaver (/etc/pam.d/xscreensaver) and setuid needs to be set for xscreensaver-auth. Interestingly when I setuid xscreensaver-auth manually I run into the following when unlocking: Aug 10 13:35:02 localhost unix_chkpwd[2197]: check pass; user unknown Aug 10 13:35:02 localhost unix_chkpwd[2197]: password check failed for user (rhuijzer) Aug 10 13:35:02 localhost xscreensaver-auth: pam_unix(xscreensaver:auth): authentication failure; logname=3D uid=3D1000 euid=3D1000 tty=3D:0 ruser=3D= rhost=3D user=3Drhuijzer But this might be fixed in time by [RFC PATCH] gnu: linux-pam: Change path to unix_chkpwd helper . I don't know how to fix this elegantly, maybe create a dedicated service for xscreensaver instead of the standard screen-locker-service? Thanks, Op wo 10 aug. 2022 om 09:14 schreef Roman Scherer < roman.scherer@burningswell.com>: > > Hi Ludo and Rick, > > sorry for the trouble. I'm running xscreensaver on a foreign distro and > did not notice this. Probably because somehow my screen wasn't locked, > but still showing random screensavers. > > However, now that I tried the `xscreensaver-command -lock` command I see > a dialog with a "Password initialization failed" message. > > The xscreensave logs also show this: > > xscreensaver-auth: 06:45:55: OOM: /proc/99677/oom_score_adj: Permission > denied > xscreensaver-auth: 06:45:55: To prevent the kernel from randomly > unlocking > xscreensaver-auth: 06:45:55: your screen via the out-of-memory killer, > xscreensaver-auth: 06:45:55: "xscreensaver-auth" must be setuid root. > xscreensaver-auth: 06:46:06: PAM: warning: /etc/pam.d/xscreensaver does > not exist. > xscreensaver-auth: 06:46:06: PAM: password authentication is unlikely to > work. > xscreensaver-auth: 06:46:15: PAM: warning: /etc/pam.d/xscreensaver does > not exist. > xscreensaver-auth: 06:46:15: PAM: password authentication is unlikely to > work. > > When the dialog popped up, I had to switch to a terminal and kill > xscreensaver to be able to access my desktop again. > > Should we revert it, until we figured out what's necesarry to get this > working again? > > r0man > > Ludovic Court=C3=A8s writes: > > > Hi Rick, > > > > Rick Huijzer skribis: > > > >> The latest xscreensaver patch > rendered > >> xscreensaver unusable on my systems. When I try to unlock my screen I = am > >> greeted with the message 'xscreensaver: don't login as root', even > though I > >> don't invoke it as root. > >> > >> > >> $xscreensaver-command -lock > >> Aug 9 08:45:22 localhost shepherd[1]: [slim] xscreensaver-gfx: > 08:45:22: > >> 1: running as root: not launching hacks. > >> Aug 9 09:10:29 localhost shepherd[1]: [slim] xscreensaver-command: > locking > >> Aug 9 09:10:32 localhost shepherd[1]: [slim] xscreensaver-gfx: > 09:10:32: > >> 0: running as root: not launching hacks. > >> > >> When I remove the > >> (screen-locker-service xscreensaver) > >> I run into all kinds of set-uid problems. > > > > Sorry about that, I built it during review but did not actually run it. > > > > One effect of =E2=80=98screen-locker-service=E2=80=99 is to make the pr= ogram setuid-root > > so that it can authenticate users. It would seem that something change= d > > in xscreensaver in that area; quoth =E2=80=98driver/subprocs.c=E2=80=99= : > > > > if (getuid() =3D=3D (uid_t) 0 || geteuid() =3D=3D (uid_t) 0) > > /* Prior to XScreenSaver 6, if running as root, we would change > the > > effective uid to the user "nobody" or "daemon" or "noaccess"= , > > but even that was just encouraging bad behavior. Don't log = in > > as root. */ > > { > > fprintf (stderr, "%s: %d: running as root: not launching > hacks.\n", > > blurb(), ssi->number); > > screenhack_obituary (ssi, "", "XScreenSaver: Don't log in as > root."); > > goto DONE; > > } > > > > OTOH the =E2=80=98disavow_privileges=E2=80=99 function is supposed to d= rop root > > privileges early on. > > > > So I=E2=80=99m not sure how it=E2=80=99s supposed to be run. R0man, id= eas? > > > > Thanks, > > Ludo=E2=80=99. > --=20 Met vriendelijke groet, Rick Huijzer --00000000000002486005e5e1b735 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Roman and Ludo,

It seems that x= screensaver-auth needs to be setuid instead of the main xscreensaver binary= . The screen-locker-service in xorg.scm sets the provided package setuid an= d sets the required pam configuration for the provided package. The problem= is that the pam configuration needs to be set for xscreensaver (/etc/pam.d= /xscreensaver) and setuid needs to be set for xscreensaver-auth.=C2=A0

Interestingly when I setuid xscreensaver-auth manually= I run into the following when unlocking:
Aug 10 13:35:02 localho= st unix_chkpwd[2197]: check pass; user unknown
Aug 10 13:35:02 localhost= unix_chkpwd[2197]: password check failed for user (rhuijzer)
Aug 10 13:= 35:02 localhost xscreensaver-auth: pam_unix(xscreensaver:auth): authenticat= ion failure; logname=3D uid=3D1000 euid=3D1000 tty=3D:0 ruser=3D rhost=3D = =C2=A0user=3Drhuijzer

But this=C2=A0might=C2= =A0be fixed in time by [RFC P= ATCH] gnu: linux-pam: Change path to unix_chkpwd helper.=C2=A0

I don't know how to fix this elegantly, maybe create a= dedicated service for xscreensaver instead of=C2=A0the standard screen-loc= ker-service?=C2=A0

Thanks,

Op wo 10 aug. 2022 om 09= :14 schreef Roman Scherer <roman.scherer@burningswell.com>:

Hi Ludo and Rick,

sorry for the trouble. I'm running xscreensaver on a foreign distro and=
did not notice this. Probably because somehow my screen wasn't locked,<= br> but still showing random screensavers.

However, now that I tried the `xscreensaver-command -lock` command I see a dialog with a "Password initialization failed" message.

The xscreensave logs also show this:

xscreensaver-auth: 06:45:55: OOM: /proc/99677/oom_score_adj: Permission den= ied
xscreensaver-auth: 06:45:55:=C2=A0 =C2=A0To prevent the kernel from randoml= y unlocking
xscreensaver-auth: 06:45:55:=C2=A0 =C2=A0your screen via the out-of-memory = killer,
xscreensaver-auth: 06:45:55:=C2=A0 =C2=A0"xscreensaver-auth" must= be setuid root.
xscreensaver-auth: 06:46:06: PAM: warning: /etc/pam.d/xscreensaver does not= exist.
xscreensaver-auth: 06:46:06: PAM: password authentication is unlikely to wo= rk.
xscreensaver-auth: 06:46:15: PAM: warning: /etc/pam.d/xscreensaver does not= exist.
xscreensaver-auth: 06:46:15: PAM: password authentication is unlikely to wo= rk.

When the dialog popped up, I had to switch to a terminal and kill
xscreensaver to be able to access my desktop again.

Should we revert it, until we figured out what's necesarry to get this<= br> working again?

r0man

Ludovic Court=C3=A8s <= ludo@gnu.org> writes:

> Hi Rick,
>
> Rick Huijzer <ikbenrickhuyzer@gmail.com> skribis:
>
>> The latest xscreensaver patch <https://issues.guix.gnu.= org/56597> rendered
>> xscreensaver unusable on my systems. When I try to unlock my scree= n I am
>> greeted with the message 'xscreensaver: don't login as roo= t', even though I
>> don't invoke it as root.
>>
>>
>> $xscreensaver-command -lock
>> Aug=C2=A0 9 08:45:22 localhost shepherd[1]: [slim] xscreensaver-gf= x: 08:45:22:
>> 1: running as root: not launching hacks.
>> Aug=C2=A0 9 09:10:29 localhost shepherd[1]: [slim] xscreensaver-co= mmand: locking
>> Aug=C2=A0 9 09:10:32 localhost shepherd[1]: [slim] xscreensaver-gf= x: 09:10:32:
>> 0: running as root: not launching hacks.
>>
>> When I remove the
>> (screen-locker-service xscreensaver)
>> I run into all kinds of set-uid problems.
>
> Sorry about that, I built it during review but did not actually run it= .
>
> One effect of =E2=80=98screen-locker-service=E2=80=99 is to make the p= rogram setuid-root
> so that it can authenticate users.=C2=A0 It would seem that something = changed
> in xscreensaver in that area; quoth =E2=80=98driver/subprocs.c=E2=80= =99:
>
>=C2=A0 =C2=A0 =C2=A0 =C2=A0if (getuid() =3D=3D (uid_t) 0 || geteuid() = =3D=3D (uid_t) 0)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0/* Prior to XScreenSaver 6, if runnin= g as root, we would change the
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 effective uid to the user &qu= ot;nobody" or "daemon" or "noaccess",
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 but even that was just encour= aging bad behavior.=C2=A0 Don't log in
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 as root. */
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0{
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0fprintf (stderr, "%s: %d:= running as root: not launching hacks.\n",
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 b= lurb(), ssi->number);
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0screenhack_obituary (ssi, &quo= t;", "XScreenSaver: Don't log in as root.");
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0goto DONE;
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0}
>
> OTOH the =E2=80=98disavow_privileges=E2=80=99 function is supposed to = drop root
> privileges early on.
>
> So I=E2=80=99m not sure how it=E2=80=99s supposed to be run.=C2=A0 R0m= an, ideas?
>
> Thanks,
> Ludo=E2=80=99.


--
Met vriendelijke groet,=

Rick Huijzer

--00000000000002486005e5e1b735-- From unknown Sat Aug 16 22:46:10 2025 X-Loop: help-debbugs@gnu.org Subject: bug#57071: Xscreensaver not working since latest patch Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Thu, 11 Aug 2022 14:00:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 57071 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Rick Huijzer Cc: 57071@debbugs.gnu.org, Roman Scherer Received: via spool by 57071-submit@debbugs.gnu.org id=B57071.166022637428744 (code B ref 57071); Thu, 11 Aug 2022 14:00:02 +0000 Received: (at 57071) by debbugs.gnu.org; 11 Aug 2022 13:59:34 +0000 Received: from localhost ([127.0.0.1]:54693 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1oM8ik-0007TX-2r for submit@debbugs.gnu.org; Thu, 11 Aug 2022 09:59:34 -0400 Received: from eggs.gnu.org ([209.51.188.92]:39264) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1oM8ih-0007TJ-4Y for 57071@debbugs.gnu.org; Thu, 11 Aug 2022 09:59:33 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:52686) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1oM8ib-0002Ia-D3; Thu, 11 Aug 2022 09:59:25 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=MIME-Version:In-Reply-To:Date:References:Subject:To: From; bh=rszighptsDiBKAgMrCi1g+KVqPgyFqmXiOWoTk8FhCQ=; b=k3JdSTcHjspkyNoogYMa qwdKQEfc5iVQzVqlN/mLsGVl399ElOERTmEvp91bjfcNRbvNQulHV7aKKkMScGyeuvdgxN23nqohA ipzTvRM10ZXTgIetuEPkxcs+xZBMsiPv3szlenE+vb6WlqGa48n7Rtu4T+MO69B0brI7myZLI6eYP BLCYYH7++wItf+wYkjmcI19E19giNW4GyLXc4IRUiEai42yJSdwidrGu62K+tR9bP1Omc1gc2gJcs 8CSBKd0bwyqODSAjMkZXLOIkDKt3TBAFkEDmbm/ylGpEwJPxPfB1Da65qWKGT4GqQjyjcjAOzoqGU 4RnByvMm4DIbpw==; Received: from [2001:660:6102:320:e120:2c8f:8909:cdfe] (port=58068 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1oM8ia-0007IA-Di; Thu, 11 Aug 2022 09:59:25 -0400 From: Ludovic =?UTF-8?Q?Court=C3=A8s?= References: <87zggd14vh.fsf@gnu.org> <87bksstvs0.fsf@burningswell.com> X-URL: http://www.fdn.fr/~lcourtes/ X-Revolutionary-Date: Quartidi 24 Thermidor an 230 de la =?UTF-8?Q?R=C3=A9volution,?= jour de =?UTF-8?Q?l'Aun=C3=A9e?= X-PGP-Key-ID: 0x090B11993D9AEBB5 X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 X-OS: x86_64-pc-linux-gnu Date: Thu, 11 Aug 2022 15:59:21 +0200 In-Reply-To: (Rick Huijzer's message of "Wed, 10 Aug 2022 13:54:33 +0200") Message-ID: <87v8qyubie.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Hi Rick & Roman, Rick Huijzer skribis: > It seems that xscreensaver-auth needs to be setuid instead of the main > xscreensaver binary. The screen-locker-service in xorg.scm sets the > provided package setuid and sets the required pam configuration for the > provided package. The problem is that the pam configuration needs to be s= et > for xscreensaver (/etc/pam.d/xscreensaver) and setuid needs to be set for > xscreensaver-auth. > > Interestingly when I setuid xscreensaver-auth manually I run into the > following when unlocking: > Aug 10 13:35:02 localhost unix_chkpwd[2197]: check pass; user unknown > Aug 10 13:35:02 localhost unix_chkpwd[2197]: password check failed for us= er > (rhuijzer) > Aug 10 13:35:02 localhost xscreensaver-auth: pam_unix(xscreensaver:auth): > authentication failure; logname=3D uid=3D1000 euid=3D1000 tty=3D:0 ruser= =3D rhost=3D > user=3Drhuijzer > > But this might be fixed in time by [RFC PATCH] gnu: linux-pam: Change path > to unix_chkpwd helper . > > I don't know how to fix this elegantly, maybe create a dedicated service > for xscreensaver instead of the standard screen-locker-service? Yes, either that or a special case in =E2=80=98screen-locker-service=E2=80= =99. Could you give it a try? Unfortunately I=E2=80=99m going to be away from keyboard for a bit; please = do ping here and/or on IRC if you don=E2=80=99t get a timely reply. Thanks, Ludo=E2=80=99. From unknown Sat Aug 16 22:46:10 2025 X-Loop: help-debbugs@gnu.org Subject: bug#57071: Xscreensaver not working since latest patch Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Mon, 29 Aug 2022 13:23:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 57071 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Rick Huijzer Cc: 57071@debbugs.gnu.org, Roman Scherer Received: via spool by 57071-submit@debbugs.gnu.org id=B57071.166177937231768 (code B ref 57071); Mon, 29 Aug 2022 13:23:02 +0000 Received: (at 57071) by debbugs.gnu.org; 29 Aug 2022 13:22:52 +0000 Received: from localhost ([127.0.0.1]:60399 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1oSej5-0008GK-QK for submit@debbugs.gnu.org; Mon, 29 Aug 2022 09:22:52 -0400 Received: from eggs.gnu.org ([209.51.188.92]:58234) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1oSej4-0008Fw-1N for 57071@debbugs.gnu.org; Mon, 29 Aug 2022 09:22:50 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:54770) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1oSeiy-0006l4-54; Mon, 29 Aug 2022 09:22:44 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=MIME-Version:In-Reply-To:Date:References:Subject:To: From; bh=3R5ns5sUKv9Zwkyupm/Cw5pPEtVvc4qzYTEz8936O1M=; b=q9cIi9ZcsXcOTxglTgAe N8vSA8oRDmTzoyetL0aUkwLDu/qpOiBJp0h7FhqJIlFEKuhbYvmtMJvuOivJdJ/VfYxgRMXprmnRH Z8l5Oqhu9FcyCBAIcdkFHvSj+wVxRbBxcpxBnH4Myz/mvOnrDwVK/x3qkD36+EqP0CNJCSSGV5zGZ J8gWNTlo1iRprSYPOB88hn6N+huXv0EaxTApTfdrxWmMNQdqmxBYhCDlSANIYz3DeGyj4vgqY0aaF IToddQ3pbaeLubGaLd5KJCACGJ/sJpx8sRyo8/NYj1vtXGSSbQy8/Y9DAF/dMcC05XnTJe/Sdurvl BTDpoSFuS8e3tA==; Received: from [2001:660:6102:320:e120:2c8f:8909:cdfe] (port=45442 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1oSeix-0002MO-MZ; Mon, 29 Aug 2022 09:22:43 -0400 From: Ludovic =?UTF-8?Q?Court=C3=A8s?= References: <87zggd14vh.fsf@gnu.org> <87bksstvs0.fsf@burningswell.com> <87v8qyubie.fsf@gnu.org> Date: Mon, 29 Aug 2022 15:22:40 +0200 In-Reply-To: <87v8qyubie.fsf@gnu.org> ("Ludovic =?UTF-8?Q?Court=C3=A8s?="'s message of "Thu, 11 Aug 2022 15:59:21 +0200") Message-ID: <87a67n6v6n.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.1 (gnu/linux) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="=-=-=" X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Heya, Ludovic Court=C3=A8s skribis: > Rick Huijzer skribis: > >> It seems that xscreensaver-auth needs to be setuid instead of the main >> xscreensaver binary. The screen-locker-service in xorg.scm sets the >> provided package setuid and sets the required pam configuration for the >> provided package. The problem is that the pam configuration needs to be = set >> for xscreensaver (/etc/pam.d/xscreensaver) and setuid needs to be set for >> xscreensaver-auth. >> >> Interestingly when I setuid xscreensaver-auth manually I run into the >> following when unlocking: >> Aug 10 13:35:02 localhost unix_chkpwd[2197]: check pass; user unknown >> Aug 10 13:35:02 localhost unix_chkpwd[2197]: password check failed for u= ser >> (rhuijzer) >> Aug 10 13:35:02 localhost xscreensaver-auth: pam_unix(xscreensaver:auth): >> authentication failure; logname=3D uid=3D1000 euid=3D1000 tty=3D:0 ruser= =3D rhost=3D >> user=3Drhuijzer >> >> But this might be fixed in time by [RFC PATCH] gnu: linux-pam: Change pa= th >> to unix_chkpwd helper . >> >> I don't know how to fix this elegantly, maybe create a dedicated service >> for xscreensaver instead of the standard screen-locker-service? > > Yes, either that or a special case in =E2=80=98screen-locker-service=E2= =80=99. With the attached patch I can make =E2=80=98xscreensaver-auth=E2=80=99 setu= id-root (which is optional: it=E2=80=99s needed to tweak OOM behavior) while keepin= g the =E2=80=98xscreensaver=E2=80=99 PAM entry that=E2=80=99s needed. However, authentication=E2=80=99s still failing due to =E2=80=98unix_chkpwd= =E2=80=99 not working on current =E2=80=98master=E2=80=99 where is missing. Ideas on how to work around that? It=E2=80=99s not clear to me how =E2=80=98unix_chkpwd=E2=80=99 ends up being invoked in the first place=E2= =80=A6 Thanks, Ludo=E2=80=99. --=-=-= Content-Type: text/x-patch; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable diff --git a/gnu/packages/xdisorg.scm b/gnu/packages/xdisorg.scm index 7be995a438..72698aa28a 100644 --- a/gnu/packages/xdisorg.scm +++ b/gnu/packages/xdisorg.scm @@ -1655,8 +1655,16 @@ (define-public xscreensaver (lambda _ (substitute* '("driver/Makefile.in" "po/Makefile.in.in") (("@GTK_DATADIR@") "@datadir@") - (("@PO_DATADIR@") "@datadir@")) - #t))) + (("@PO_DATADIR@") "@datadir@")))) + (add-before 'configure 'adjust-default-path + (lambda _ + ;; On Guix System, give higher precedence to the setuid-root + ;; 'xscreensaver-auth' program compared to the one that lives= in + ;; $libexecdir. This modifies code in the 'hack_environment' + ;; function, which changes $PATH. + (substitute* "driver/xscreensaver.c" + (("=3D DEFAULT_PATH_PREFIX") + "=3D \"/run/setuid-programs:\" DEFAULT_PATH_PREFIX"))))) #:configure-flags '("--with-pam" =20 ;; Don't check /proc/interrupts in the build @@ -1704,7 +1712,11 @@ (define-public xscreensaver (license (license:non-copyleft (string-append "http://metadata.ftp-master.debian.org/changelogs/" - "/main/x/xscreensaver/xscreensaver_5.36-1_copyright"))))) + "/main/x/xscreensaver/xscreensaver_5.36-1_copyright"))) + (properties + ;; Tell 'screen-locker-service' which program should be setuid-root. + '((screen-locker-setuid-program + . "libexec/xscreensaver/xscreensaver-auth"))))) =20 (define-public xssproxy (package diff --git a/gnu/services/xorg.scm b/gnu/services/xorg.scm index 0cbd9aa53b..8f99c0f023 100644 --- a/gnu/services/xorg.scm +++ b/gnu/services/xorg.scm @@ -1,6 +1,6 @@ ;;; GNU Guix --- Functional package management for GNU ;;; Copyright =C2=A9 2017 Andy Wingo -;;; Copyright =C2=A9 2013, 2014, 2015, 2016, 2017, 2019, 2020 Ludovic Cour= t=C3=A8s +;;; Copyright =C2=A9 2013-2017, 2019-2020, 2022 Ludovic Court=C3=A8s ;;; Copyright =C2=A9 2015 Sou Bunnbu ;;; Copyright =C2=A9 2018, 2019 Timothy Sample ;;; Copyright =C2=A9 2019 Jan (janneke) Nieuwenhuizen @@ -680,12 +680,26 @@ (define slim-service-type ;;; =20 (define-record-type - (screen-locker name program empty?) + (screen-locker name package empty?) screen-locker? (name screen-locker-name) ;string - (program screen-locker-program) ;gexp + (package screen-locker-package) ;file-like (empty? screen-locker-allows-empty-passwords?)) ;Boolean =20 +(define (screen-locker-setuid-program-name locker) + "Return the name of the setuid program of LOCKER. It's usually LOCKER's +name but it might differ in some cases--e.g., 'xscreensaver-auth' for +XScreenSaver." + (let ((package (screen-locker-package locker))) + (or (and (package? package) + (assoc-ref (package-properties package) + 'screen-locker-setuid-program)) + (string-append "bin/" (screen-locker-name locker))))) + +(define (screen-locker-setuid-program locker) + (file-append (screen-locker-package locker) "/" + (screen-locker-setuid-program-name locker))) + (define screen-locker-pam-services (match-lambda (($ name _ empty?) @@ -693,7 +707,16 @@ (define screen-locker-pam-services #:allow-empty-passwords? empty?))))) =20 (define screen-locker-setuid-programs - (compose list file-like->setuid-program screen-locker-program)) + (compose list file-like->setuid-program screen-locker-setuid-program)) + +(define (screen-locker-profile-entries locker) + ;; If LOCKER's program is setuid (e.g., 'slock'), then no need to add it= to + ;; the main profile since it's already in /run/setuid-programs. Otherwi= se + ;; (e.g., 'xscreensaver-auth'), add it to the profile. + (if (string=3D? (screen-locker-setuid-program-name locker) + (string-append "bin/" (screen-locker-name locker))) + '() + (list (screen-locker-package locker)))) =20 (define screen-locker-service-type (service-type (name 'screen-locker) @@ -701,7 +724,9 @@ (define screen-locker-service-type (list (service-extension pam-root-service-type screen-locker-pam-services) (service-extension setuid-program-service-type - screen-locker-setuid-programs))) + screen-locker-setuid-programs) + (service-extension profile-service-type + screen-locker-profile-entries))) (description "Allow the given program to be used as a screen locker for the graphical server by making it setuid-root, so it can authenticate user= s, @@ -721,8 +746,7 @@ (define* (screen-locker-service package =20 makes the good ol' XlockMore usable." (service screen-locker-service-type - (screen-locker program - (file-append package "/bin/" program) + (screen-locker program package allow-empty-passwords?))) =20 diff --git a/gnu/system/examples/lightweight-desktop.tmpl b/gnu/system/exam= ples/lightweight-desktop.tmpl index d4330ecc8e..1ab6ecd4d2 100644 --- a/gnu/system/examples/lightweight-desktop.tmpl +++ b/gnu/system/examples/lightweight-desktop.tmpl @@ -3,9 +3,9 @@ ;; environments. =20 (use-modules (gnu) (gnu system nss)) -(use-service-modules desktop) +(use-service-modules desktop xorg) (use-package-modules bootloaders certs emacs emacs-xyz ratpoison suckless = wm - xorg) + xdisorg xorg) =20 (operating-system (host-name "antelope") @@ -53,7 +53,9 @@ =20 ;; Use the "desktop" services, which include the X11 ;; log-in service, networking with NetworkManager, and more. - (services %desktop-services) + (services (append (list (screen-locker-service slock) + (screen-locker-service xscreensaver)) + %desktop-services)) =20 ;; Allow resolution of '.local' host names with mDNS. (name-service-switch %mdns-host-lookup-nss)) --=-=-=-- From unknown Sat Aug 16 22:46:10 2025 X-Loop: help-debbugs@gnu.org Subject: bug#57071: Xscreensaver not working since latest patch References: In-Reply-To: Resent-From: webdev@toryanderson.com (Tory S. Anderson) Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Fri, 14 Apr 2023 07:54:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 57071 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 57071@debbugs.gnu.org Received: via spool by 57071-submit@debbugs.gnu.org id=B57071.168145878417973 (code B ref 57071); Fri, 14 Apr 2023 07:54:03 +0000 Received: (at 57071) by debbugs.gnu.org; 14 Apr 2023 07:53:04 +0000 Received: from localhost ([127.0.0.1]:45360 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pnEEu-0004fT-3E for submit@debbugs.gnu.org; Fri, 14 Apr 2023 03:53:04 -0400 Received: from outbound-ss-761.bluehost.com ([74.220.211.250]:34933) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pmzQ3-0008VW-Oh for 57071@debbugs.gnu.org; Thu, 13 Apr 2023 12:03:34 -0400 Received: from cmgw13.mail.unifiedlayer.com (unknown [10.0.90.128]) by progateway8.mail.pro1.eigbox.com (Postfix) with ESMTP id 6597A10048138 for <57071@debbugs.gnu.org>; Thu, 13 Apr 2023 16:03:25 +0000 (UTC) Received: from box2268.bluehost.com ([50.87.192.155]) by cmsmtp with ESMTP id mzPxpbcJLNX2amzPxpEhLK; Thu, 13 Apr 2023 16:03:25 +0000 X-Authority-Reason: nr=8 X-Authority-Analysis: v=2.4 cv=NMAQR22g c=1 sm=1 tr=0 ts=643827cd a=qSEjBsLIdllkX7NNYqHDjg==:117 a=qSEjBsLIdllkX7NNYqHDjg==:17 a=dLZJa+xiwSxG16/P+YVxDGlgEgI=:19 a=dKHAf1wccvYA:10:nop_rcvd_month_year a=mt2KWgp97SsA:10:endurance_base64_authed_username_1 a=mDV3o1hIAAAA:8 a=NPu6Oz8RpkAp5O96PmwA:9 a=ZXulRonScM0A:10:nop_mobile_phish_fin_act a=_FVE-zBwftR9WsbkzFJk:22 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=toryanderson.com; s=default; h=Content-Type:MIME-Version:Message-ID:Date: Content-Transfer-Encoding:Subject:To:From:Sender:Reply-To:Cc:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=GNlyw2QEe6k+qPNoB3RkMS/QCeSup5deo0OFZEhPjDU=; b=Kd6oIyIQ+REJJ6w+4LuiN/xv2Q GcnAZE0b0hL1RVapzBugURwyDM0y9Umq+1/qZnKXCbEoP9nGR9RZ3dLFpGVZHX+GiLz4GCLo1d930 VS0ZDigezwJ/861ZpJrzOF8ajyZKAfWnUlWLa7wFHXJg8PzP+hEJ1+fvaGjxXlPLH408=; Received: from [128.187.112.28] (port=21560 helo=torysa) by box2268.bluehost.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from ) id 1pmzPw-002Qol-KU; Thu, 13 Apr 2023 10:03:24 -0600 From: webdev@toryanderson.com (Tory S. Anderson) Content-Transfer-Encoding: quoted-printable Date: Thu, 13 Apr 2023 10:03:22 -0600 Message-ID: <875y9zvkfp.fsf@byu.edu> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - box2268.bluehost.com X-AntiAbuse: Original Domain - debbugs.gnu.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - toryanderson.com X-BWhitelist: no X-Source-IP: 128.187.112.28 X-Source-L: No X-Exim-ID: 1pmzPw-002Qol-KU X-Source: X-Source-Args: X-Source-Dir: X-Source-Sender: (torysa) [128.187.112.28]:21560 X-Source-Auth: webdev@toryanderson.com X-Email-Count: 1 X-Source-Cap: dG9yeWFuZGU7dG9yeWFuZGU7Ym94MjI2OC5ibHVlaG9zdC5jb20= X-Local-Domain: yes X-Spam-Score: 0.0 (/) X-Mailman-Approved-At: Fri, 14 Apr 2023 03:52:59 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) I hit the same error. I began with the error and the fix from https://issues.guix.gnu.org/23286 and then put xscreensaver into my screenlock section of my config: --8<---------------cut here---------------start------------->8--- (list (service gnome-desktop-service-type) ;(screen-locker-service xscreensaver) ;; this initializes, but shouts a "do not run as root" error instead of running my images, and doesn't accept my password ;;; other stuff ) --8<---------------cut here---------------end--------------->8--- Now I have 'xscreensaver: don't login as root' on my screensaver, and no images. As mentioned earlier, only the xscreensaver-auth program should be setuid, not the whole thing, apparently. From unknown Sat Aug 16 22:46:10 2025 MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) X-Loop: help-debbugs@gnu.org From: help-debbugs@gnu.org (GNU bug Tracking System) To: Rick Huijzer Subject: bug#57071: closed (Close) Message-ID: References: X-Gnu-PR-Message: they-closed 57071 X-Gnu-PR-Package: guix Reply-To: 57071@debbugs.gnu.org Date: Sat, 26 Jul 2025 17:16:02 +0000 Content-Type: multipart/mixed; boundary="----------=_1753550162-3952-1" This is a multi-part message in MIME format... ------------=_1753550162-3952-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Your bug report #57071: Xscreensaver not working since latest patch which was filed against the guix package, has been closed. The explanation is attached below, along with your original report. If you require more details, please reply to 57071@debbugs.gnu.org. --=20 57071: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D57071 GNU Bug Tracking System Contact help-debbugs@gnu.org with problems ------------=_1753550162-3952-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 57071-done) by debbugs.gnu.org; 26 Jul 2025 17:15:03 +0000 Received: from localhost ([127.0.0.1]:44623 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ufiUA-0000sm-TR for submit@debbugs.gnu.org; Sat, 26 Jul 2025 13:15:03 -0400 Received: from hera.aquilenet.fr ([185.233.100.1]:37954) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1ufiU8-0000ri-SO for 57071-done@debbugs.gnu.org; Sat, 26 Jul 2025 13:15:01 -0400 Received: from localhost (localhost [127.0.0.1]) by hera.aquilenet.fr (Postfix) with ESMTP id 54B9E252; Sat, 26 Jul 2025 19:14:54 +0200 (CEST) Authentication-Results: hera.aquilenet.fr; none X-Virus-Scanned: Debian amavis at hera.aquilenet.fr Received: from hera.aquilenet.fr ([127.0.0.1]) by localhost (hera.aquilenet.fr [127.0.0.1]) (amavis, port 10024) with ESMTP id 3VZjzppa0RN7; Sat, 26 Jul 2025 19:14:53 +0200 (CEST) Received: from jurong (86.56.141.77.rev.sfr.net [77.141.56.86]) by hera.aquilenet.fr (Postfix) with ESMTPSA id C0F64211; Sat, 26 Jul 2025 19:14:53 +0200 (CEST) Date: Sat, 26 Jul 2025 19:14:52 +0200 From: Andreas Enge To: 57071-done@debbugs.gnu.org Subject: Close Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline X-Spamd-Result: default: False [-5.38 / 15.00]; BAYES_HAM(-3.00)[99.98%]; NEURAL_HAM(-2.78)[-0.927]; MID_RHS_NOT_FQDN(0.50)[]; MIME_GOOD(-0.10)[text/plain]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; TO_MATCH_ENVRCPT_ALL(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; TO_DN_NONE(0.00)[]; URIBL_BLOCKED(0.00)[localhost:rdns,localhost:helo]; FROM_HAS_DN(0.00)[]; ARC_NA(0.00)[] X-Rspamd-Action: no action X-Rspamd-Queue-Id: 54B9E252 X-Rspamd-Server: hera X-Spamd-Bar: ----- X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 57071-done X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) I am closing this as probably not relevant anymore; otherwise please open a new issue on codeberg. Andreas ------------=_1753550162-3952-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by debbugs.gnu.org; 9 Aug 2022 10:28:00 +0000 Received: from localhost ([127.0.0.1]:42618 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1oLMSt-0006Uh-C6 for submit@debbugs.gnu.org; Tue, 09 Aug 2022 06:28:00 -0400 Received: from lists.gnu.org ([209.51.188.17]:41936) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1oLKEH-0000Z9-2g for submit@debbugs.gnu.org; Tue, 09 Aug 2022 04:04:48 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:51038) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1oLKEE-0005Yg-Va for bug-guix@gnu.org; Tue, 09 Aug 2022 04:04:44 -0400 Received: from mail-ej1-x629.google.com ([2a00:1450:4864:20::629]:35787) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1oLKEA-0003zq-JQ for bug-guix@gnu.org; Tue, 09 Aug 2022 04:04:42 -0400 Received: by mail-ej1-x629.google.com with SMTP id a7so20861657ejp.2 for ; Tue, 09 Aug 2022 01:04:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=to:subject:message-id:date:from:mime-version:from:to:cc; bh=JJB6qutlG1s1+XNJwjY8lbiSMfCLJUtQxW5/PCaPA3E=; b=D76fsGTNJcWuKjayxKZpn19zzcKSgJPX5yP4kJBn3Pj6pr8KZDXKtp8ftXZhUgPzSl N3Fb9tfh9GoL+hgqMwhWIGiRCvg8pJkrzAHhmtyzNCZgNGqWw2eUF9ciJKz+fPEcgph1 LBKyzmAVBY5id0m89bRV5PLoOe1h96FRjOFV3iYUUz8/2TF/2aGd6doCAHw7zkCj4+l/ tDEFBmqQ2p3Rmef/pGdoDZaheV1jJIox25Sepk97ilYSmf0BQIRPH5McUXEZCRaYtvT0 Pf5e0c3pzGa2icJEYG5XYg8W0rlsCjXNxcm24DVqzIsxP2isWgaC39s7hm3AREam60dx 7WWw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc; bh=JJB6qutlG1s1+XNJwjY8lbiSMfCLJUtQxW5/PCaPA3E=; b=VbBsAPZ2/qqnoZK1z741M2FR6uDTXRdfwQgU1gxgYtKvRh9w2kNqm+cTomXhB7Dety H3vK9kUVcklh8xvcfHcZNqf61sKtf8MZWIgJtat2PZ4XLXAX2SgFwbN08lvo8tRb6T6f OtekqYu4D+2dMWfaADqnmm5eckv4URcKEDTdXnJff+Dtnc0cm1CgevseJsQFrti83qLU B40PXH3FxSQjHBKiJvUZ92D+q6WyXCSYjQxrjUW+sC3X8PuK8Xahu58J3rqGZs40Jimc IsDMcKWrFeugX1hDxA2+MT90YJX1APdT9HbCAWcHwzBIPDtTQrA7+XHj9NHIfHbrCNxU m5lQ== X-Gm-Message-State: ACgBeo1R3NVyNOtDwt6u/mmjU/bzh0Q64Rm+UrOTwCmNCob4X642Vnmy U6SP5l5f5A9rD4cOhJTFWwZfjT8hn1ml2ucF2aOS8WJI X-Google-Smtp-Source: AA6agR711ypRAn4vQRaaX3GVDsM1VkmXGGRKF/tqucwv049xXKZynQ+MQlMPQdzA9eKHJE36i4C5ueH44ZR3XILmQ+g= X-Received: by 2002:a17:906:ef8c:b0:730:e4e0:1f69 with SMTP id ze12-20020a170906ef8c00b00730e4e01f69mr14887129ejb.113.1660032268225; Tue, 09 Aug 2022 01:04:28 -0700 (PDT) MIME-Version: 1.0 From: Rick Huijzer Date: Tue, 9 Aug 2022 10:04:17 +0200 Message-ID: Subject: Xscreensaver not working since latest patch To: bug-guix@gnu.org Content-Type: multipart/alternative; boundary="000000000000a9d40205e5ca615f" Received-SPF: pass client-ip=2a00:1450:4864:20::629; envelope-from=ikbenrickhuyzer@gmail.com; helo=mail-ej1-x629.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.3 (-) X-Debbugs-Envelope-To: submit X-Mailman-Approved-At: Tue, 09 Aug 2022 06:27:56 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) --000000000000a9d40205e5ca615f Content-Type: text/plain; charset="UTF-8" Hi, The latest xscreensaver patch rendered xscreensaver unusable on my systems. When I try to unlock my screen I am greeted with the message 'xscreensaver: don't login as root', even though I don't invoke it as root. $xscreensaver-command -lock Aug 9 08:45:22 localhost shepherd[1]: [slim] xscreensaver-gfx: 08:45:22: 1: running as root: not launching hacks. Aug 9 09:10:29 localhost shepherd[1]: [slim] xscreensaver-command: locking Aug 9 09:10:32 localhost shepherd[1]: [slim] xscreensaver-gfx: 09:10:32: 0: running as root: not launching hacks. When I remove the (screen-locker-service xscreensaver) I run into all kinds of set-uid problems. I will happily provide more information if needed. -- Met vriendelijke groet, Rick Huijzer --000000000000a9d40205e5ca615f Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi,=C2=A0

The latest xscreensaver patch=C2=A0r= endered xscreensaver unusable on my systems. When I try to unlock my screen= I am greeted with the message 'xscreensaver: don't login as root&#= 39;, even though I don't invoke it as root.=C2=A0

<= div>
$xscreensaver-command -lock
Aug =C2=A09 08= :45:22 localhost shepherd[1]: [slim] xscreensaver-gfx: 08:45:22: 1: running= as root: not launching hacks.
Aug =C2=A09 09:10:29 localhost shepherd[1= ]: [slim] xscreensaver-command: locking
Aug =C2=A09 09:10:32 localh= ost shepherd[1]: [slim] xscreensaver-gfx: 09:10:32: 0: running as root: not= launching hacks.

When I remove the=C2=A0
(screen-locker-service xscreensaver)
I run into all kin= ds of set-uid problems.=C2=A0

I will happily=C2=A0= provide more information if needed.

--
Met vriendelijke groet,

Rick Huijzer

<= /div>
--000000000000a9d40205e5ca615f-- ------------=_1753550162-3952-1--