-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

,--[ On Tue, Jul 08, 2008 at 02:41:13PM +0530, Shamail Tayyab wrote:

[snap]

| Correct me if i am wrong, does this really matter if it is a desktop PC 
| and a user is accessing the system via SSH, means a secure tunnel!
| I don't think there is any security hole if the system is a standalone 
| one, with someone accessing via ssh!

Anyone can run a keylogger, irrespectivie of whether it runs under your
user context or not, if you do a 'xhost +' :) .

| Had it been a network server or a multi user environment, then it can be 
| a big concern...
| 
|     Still, this will help...
|        [+]name The given name (the plus sign is optional) is added to 
| the list allowed to connect to  the  X
|                server.  The name can be a host name or a user name.
|     <!-- From UNIX Manual -->
| 
| So, give xhost [EMAIL PROTECTED]

I don't think that'll work esp. when you're using local sockets instead
of TCP. You'll need 'xhost +local:myuser' .

HTH
- -- 
·-- ·- ···· ·--- ·- ···- ·- ·--·-· --· -- ·- ·· ·-·· ·-·-·- -·-· --- --
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (FreeBSD)

iEYEARECAAYFAkhzdBkACgkQHy+EEHYuXnSqpQCglTMqn1lE1ZkvAXYJZlCTukzU
URIAmwckpfLDw80YwXHVNzXwtXqkfBYT
=LjTm
-----END PGP SIGNATURE-----

_______________________________________________
ilugd mailinglist -- [email protected]
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/[email protected]/

Reply via email to