Testing with xserver-xorg and multimon_1.0-4 shows
that this bugs is still very potent. I had been hoping
that this problem would just go away.

Two things to do:

1) distill the essence of the mis-use of the X libraries that
multimon does into a test case and file a bug against X for
being vulnerable to attack.

2) Fix multimon to correctly process X events - so that the
window manager event simply closes the application, or
maybe just the window.

Certainly running this application as root is not advised.
Add yourself to the audio group if you want to run programs
that access /dev/dsp.

-Maitland


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to