Re: [CentOS] ssh -X versus -Y

2015-07-06 Thread John Hodrien
On Mon, 6 Jul 2015, Liam O'Toole wrote: On 2015-07-05, Gordon Messmer gordon.mess...@gmail.com wrote: On 07/05/2015 04:51 AM, Liam O'Toole wrote: At this point, I don't think it's even possible to set ForwardX11Trusted=no any more. The X SECURITY extension was replaced with X Access Control

Re: [CentOS] ssh -X versus -Y

2015-07-06 Thread Liam O'Toole
On 2015-07-05, Gordon Messmer gordon.mess...@gmail.com wrote: On 07/05/2015 04:51 AM, Liam O'Toole wrote: One practical difference I have seen is the improved performance of -Y over -X. I have long attributed that to the relaxation of security controls in the former case. When and how did

Re: [CentOS] ssh -X versus -Y

2015-07-06 Thread Gordon Messmer
On 07/06/2015 04:31 AM, John Hodrien wrote: EL6: ssh -X -o ForwardX11Trusted=no somehost xterm select some text in the window X Error of failed request: BadAccess (attempt to access private resource denied) Interesting. On Fedora 22, -o ForwardX11Trusted=no seems to have no effect.

Re: [CentOS] ssh -X versus -Y

2015-07-05 Thread Liam O'Toole
On 2015-06-26, Stuart Barkley stua...@4gh.net wrote: [...] The documentation of the practical differences between -X and -Y is pretty obscure (mostly defering to the X Security extension documentation). I would like to see better clarification of the differences. One practical difference I

Re: [CentOS] ssh -X versus -Y

2015-07-05 Thread Gordon Messmer
On 07/05/2015 04:51 AM, Liam O'Toole wrote: One practical difference I have seen is the improved performance of -Y over -X. I have long attributed that to the relaxation of security controls in the former case. When and how did you measure that? The -Y change was introduced in Fedora Core 3,

Re: [CentOS] ssh -X versus -Y

2015-06-27 Thread Alexandru Chiscan
I stand corrected. Regards, Lec On 06/26/2015 07:22 PM, Stuart Barkley wrote: On Fri, 26 Jun 2015 at 03:16 -, Alexandru Chiscan wrote: On 06/25/2015 11:51 PM, Stuart Barkley wrote: Then from your desktop (assuming Linux already running X) in a local xterm do something like:

[CentOS] ssh -X versus -Y

2015-06-26 Thread Stuart Barkley
On Fri, 26 Jun 2015 at 03:16 -, Alexandru Chiscan wrote: On 06/25/2015 11:51 PM, Stuart Barkley wrote: Then from your desktop (assuming Linux already running X) in a local xterm do something like: ssh -Y remote-system Do not use that because any user logged on the server can