Xorg.wrap.man (3235B)
1 .\" Xwrapper.wrap.@appmansuffix@ 2 .\" 3 .\" Copyright 2014 Red Hat, Inc. 4 .\" 5 .\" Permission to use, copy, modify, distribute, and sell this software and its 6 .\" documentation for any purpose is hereby granted without fee, provided that 7 .\" the above copyright notice appear in all copies and that both that 8 .\" copyright notice and this permission notice appear in supporting 9 .\" documentation. 10 .\" 11 .\" The above copyright notice and this permission notice shall be included 12 .\" in all copies or substantial portions of the Software. 13 .\" 14 .\" THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS 15 .\" OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF 16 .\" MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. 17 .\" IN NO EVENT SHALL THE OPEN GROUP BE LIABLE FOR ANY CLAIM, DAMAGES OR 18 .\" OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, 19 .\" ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR 20 .\" OTHER DEALINGS IN THE SOFTWARE. 21 .\" 22 .\" Except as contained in this notice, the name of The Open Group shall 23 .\" not be used in advertising or otherwise to promote the sale, use or 24 .\" other dealings in this Software without prior written authorization 25 .\" from The Open Group. 26 .\" 27 .\" shorthand for double quote that works everywhere. 28 .ds q \N'34' 29 .TH Xorg.wrap @appmansuffix@ @xorgversion@ 30 .SH NAME 31 Xorg.wrap \- Xorg X server binary wrapper 32 .SH DESCRIPTION 33 The Xorg X server may need root rights to function properly. To start the 34 Xorg X server with these rights your system is using a suid root wrapper 35 installed as @suid_wrapper_dir@/Xorg.wrap which will execute the real 36 X server which is installed as @suid_wrapper_dir@/Xorg. 37 .PP 38 By default Xorg.wrap will autodetect if root rights are necessary, and 39 if not it will drop its elevated rights before starting the real X server. 40 By default Xorg.wrap will only allow executing the real X server from login 41 sessions on a physical console. 42 43 .SH CONFIG FILE 44 Xorg.wrap's default behavior can be overridden from the 45 \fI@sysconfdir@/X11/Xwrapper.config\fP config file. Lines starting with a 46 \fB#\fP in Xwrapper.config are considered comments and will be ignored. Any 47 other non empty lines must take the form of \fBkey\fP = \fIvalue\fP. 48 .TP 8 49 \fBallowed_users\fP = \fIrootonly\fP|\fIconsole\fP|\fIanybody\fP 50 Specify which users may start the X server through the wrapper. Use 51 \fIrootonly\fP to only allow root, use \fIconsole\fP to only allow users 52 logged into a physical console, and use \fIanybody\fP to allow anybody. 53 The default is \fIconsole\fP. 54 .TP 8 55 \fBneeds_root_rights\fP = \fIyes\fP|\fIno\fP|\fIauto\fP 56 Configure if the wrapper should drop its elevated (root) rights before starting 57 the X server. Use \fIyes\fP to force execution as root, \fIno\fP to force 58 execution with all suid rights dropped, and \fIauto\fP to let the wrapper 59 auto-detect. The default is \fIauto\fP. 60 .PP 61 When auto-detecting the wrapper will drop rights if kms graphics are available 62 and not drop them if no kms graphics are detected. If a system has multiple 63 graphics cards and some are not kms capable auto-detection may fail, 64 in this case manual configuration should be used. 65 66 .SH "SEE ALSO" 67 Xorg X server information: \fIXorg\fP(1)