On Tue, Aug 19, 2003 at 11:07:23AM -0700, Linux Rocks ! wrote:
> on your local computer you will want to allow portapotty to have access to
> your x server, at the command prompt type:
>
> xhost +portapotty
> (then you should see a message saying something like:
> portapotty being added to access control list
No, this is not necessary, and potentially insecure. Ssh automatically
takes care of everything, securely. Using xhost allows a remote server
to connect to your running X server, outside of an ssh tunnel.
_ALL_ that is necessary is making sure this line is in the sshd_config on
the server:
X11Forwarding yes
And the -X is specified on the command line, in an alias, or
ForwardX11 yes
is specified on the client in the ssh_config file.
Potential ways using xhost can be insecure:
the user misunderstands the caveats of using xhost and types:
xhost + portapotty
This allows every ip address, in addition to portapotty to connect to
the local X server.
Perhaps 'portapotty' is a semi-public unix machine, like a school
server, where X-forwarding can be very useful. Anyone on that server
can now connect to your X server.
Cory
--
Cory Petkovsek Adapting Information
Adaptable IT Consulting Technology to your
(541) 914-8417 business
[EMAIL PROTECTED] www.AdaptableIT.com
_______________________________________________
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug
