Xenocara

Xenocara is the OpenBSD build infrastructure for the project's customised X.Org Server that utilises a dedicated _x11 user by default to drop privileges and perform privilege separation in accordance to OpenBSDs least privilege policy. The patches for applying this rather important security protection were provided to upstream for the benefit of other Unix-like systems such as Linux, however the care to apply and maintain them has unfortunately not happened to date. As some Hardened Gentoo users can attest, X11 can be run without root privileges on Linux, however functionality such as access by users to recently plugged in devices such as a USB mouse is lost.

Xenocara

Xenocara is the OpenBSD build infrastructure for the project's customised X.Org Server that utilises a dedicated _x11 user by default to drop privileges and perform privilege separation in accordance to OpenBSDs least privilege policy. The patches for applying this rather important security protection were provided to upstream for the benefit of other Unix-like systems such as Linux, however the care to apply and maintain them has unfortunately not happened to date. As some Hardened Gentoo users can attest, X11 can be run without root privileges on Linux, however functionality such as access by users to recently plugged in devices such as a USB mouse is lost.