Bug#559689: gnome-screensaver: depends on obsolete libxxf86misc

[Julien Cristau]

On Mon, Dec  7, 2009 at 09:54:31 +0100, Josselin Mouette wrote:

> Le dimanche 06 décembre 2009 à 13:25 +0100, Julien Cristau a écrit : 
> > your package depends or build-depends on libxxf86misc{1,-dev}.  Recent X
> > servers don't support the XFree86-Misc X11 extension, so we're
> > considering removal of the corresponding client library.
> 
> In gnome-screensaver this is used to ensure that the
> AllowDeactivateGrabs and AllowClosedownGrabs Xorg options do not allow
> to ungrab the keys in the screensaver case.
> 
> When you remove the extension, could you ensure that, at the very least,
> the documentation mentions the security risks of using these options?
> 
> Otherwise, I think we can just disable the build-dependency and it will
> be fine.
> 
I think I mentioned this on irc back then, but for the record, these
xorg.conf options were removed in the same server release that dropped
xf86misc.  So dropping xf86misc support in screensavers would
only affect people running older X servers with the
Allow{CloseDown,Deactivate}Grabs options enabled (the default was off
for both).  If you consider this still a problem, we can defer the
xf86misc removal to post-squeeze, though.

Cheers,
Julien