- I WARNED YOU! Anybody who can run this binary can completely
- erase your hardisk. BE CAREFUL.
-
- --disable-flash
-
- This turns off the "flash"-widgets that display the current
- signal of the turntables and the master out. This might help
- fighting performance probs. Oh, If you have a better name
- for the widget please tell me ;)
-
- --enable-3dnow
-
- This enables EXPERIMENTAL 3DNow! support. It seems as if the
- current libmmx (which is included) doesn't work with the new
- gcc 2.95. So if you use that compiler do not enable this option.
-
- The built binary will run on CPUs with 3DNow! support only.
- AFAIK these are the K6II, K6III and the Athlon (K7). INTEL CPUs
- don't have 3DNow! support!
-
- For now this the only thing that might run a little faster is
- the echo effect. I planned to hack more 3DNow! code but at the
- moment I simply don't have the time.
-
+ terminatorX will be started with root privileges even when an
+ "unprivileged" user runs the binary. terminatorX will then
+ create the engine thread with realtime priority before any files
+ are written, any parameters are evaluated or connections to the
+ X11 display are established. Right after that terminatorX will
+ drop root privileges, so the actual terminatorX code runs
+ unprivileged.
+
+ The problem is, with Linux' pthreads implementation the pthread
+ manager thread (that can not be influenced by terminatorX) will
+ still run with root privileges.
+
+ So there is a small chance that a malicious attacker could
+ utilize terminatorX to acquire root privileges if installed suid
+ root, although it should require quite some effort to create an
+ exploit for that. On the other hand realtime scheduling
+ massively improves the playback performance. So depending on who
+ can access your computer you will have to decide for yourself on
+ performance vs security. Alternatively you can of course run
+ terminatorX as root to achieve realtime scheduling.
+