Bug#586685: gdm3 cookie file

[Ian Jackson]

I think we should fix this in Debian.  Having looked at the upstream
bug log I think it's clear that upstream don't understand the problem,
nor their proposed solution.  (Their proposed solution won't work if
you log in on a remote X display, for example.)

I would encourage someone to post a patch to gdm3 to either

 (a) make it not do the thing with /var/run/gdm3 at all
     (although that would have to be done with care because
      we want to avoid gdm3, while still running as root, writing to
      the user's home directory)

or

 (b) arrange in the gdm3 session setup scripts, run as the user,
     to copy the cookie into ~/.Xauthority.  There ought to be a
     timeout in case of .Xauthority locking problems.

(b) ought to be fairly straightforward and not intrusive.  If we had
such a patch it ought to be applied in the Debian package IMO.

Ian.