Re: Default local auth policy

2009-03-23 Thread Daniel Stone
Hi, On Fri, Mar 20, 2009 at 04:36:22PM -0700, Eric Anholt wrote: On Tue, 2009-03-17 at 14:06 -0400, Adam Jackson wrote: On Mon, 2009-03-16 at 12:52 -0700, Eric Anholt wrote: On Fri, 2009-03-13 at 13:46 -0400, Adam Jackson wrote: Normally I'd just change the default here, but I think

Re: Default local auth policy

2009-03-20 Thread Eric Anholt
On Tue, 2009-03-17 at 14:06 -0400, Adam Jackson wrote: On Mon, 2009-03-16 at 12:52 -0700, Eric Anholt wrote: On Fri, 2009-03-13 at 13:46 -0400, Adam Jackson wrote: Currently, if you start X without -ac and without -auth, the default connection policy is to allow connections from

Re: Default local auth policy

2009-03-17 Thread Adam Jackson
On Mon, 2009-03-16 at 12:52 -0700, Eric Anholt wrote: On Fri, 2009-03-13 at 13:46 -0400, Adam Jackson wrote: Currently, if you start X without -ac and without -auth, the default connection policy is to allow connections from localhost. In particular, this means on every IPv[46] address,

Re: Default local auth policy

2009-03-16 Thread Adam Jackson
On Sat, 2009-03-14 at 13:50 -0400, James Cloos wrote: Adam == Adam Jackson a...@nwnk.net writes: Adam Currently, if you start X without -ac and without -auth, Adam the default connection policy is to allow connections from Adam localhost. ... Adam I'd like to see a mode where the default

Re: Default local auth policy

2009-03-16 Thread James Cloos
Adam == Adam Jackson a...@nwnk.net writes: While I disagree that storing cookies in $HOME ‘sucks for NFS’, Adam I should have clarified. It sucks because NFS is unencrypted and Adam storing your auth cookies there means the whole wire gets to read them. Adam If you trust everyone on your

Re: Default local auth policy

2009-03-16 Thread Eric Anholt
On Fri, 2009-03-13 at 13:46 -0400, Adam Jackson wrote: Currently, if you start X without -ac and without -auth, the default connection policy is to allow connections from localhost. In particular, this means on every IPv[46] address, and any local transports including unix sockets. I'd

Re: Default local auth policy

2009-03-15 Thread Daniel Stone
On Fri, Mar 13, 2009 at 01:46:06PM -0400, Adam Jackson wrote: Currently, if you start X without -ac and without -auth, the default connection policy is to allow connections from localhost. In particular, this means on every IPv[46] address, and any local transports including unix sockets.

Re: Default local auth policy

2009-03-14 Thread James Cloos
Adam == Adam Jackson a...@nwnk.net writes: Adam Currently, if you start X without -ac and without -auth, Adam the default connection policy is to allow connections from Adam localhost. ... Adam I'd like to see a mode where the default policy is effectively Adam +si:localuser:`id -un`, which

Default local auth policy

2009-03-13 Thread Adam Jackson
Currently, if you start X without -ac and without -auth, the default connection policy is to allow connections from localhost. In particular, this means on every IPv[46] address, and any local transports including unix sockets. I'd like to see a mode where the default policy is effectively