three X.org 6.9.0 lame security questions
Auke Kok
sofar at foo-projects.org
Wed Jun 21 03:30:52 UTC 2006
Zbigniew Luszpinski wrote:
> Hi!
>
> I run X with -nolisten tcp parameter to stop X from listening.
> This option indeed closed 6000/tcp X11 port but opened instead 37435/tcp port
> and keep listening. I tried also remove X magic cookie for tcp/ip proto and
> use unix socks but tcp/ip comes back with every startx. Unix socks are
> working well and make some small X performance boost but tcp/ip cookie is
> still created after lanuching startx. It can be removed after X finishes
> loading but it is boring to remove it everytime. Sorry for asking but my
> googles are blind and man can't help.
>
> My questions:
> 1. How to make X really stop listening?
> 2. How to prevent xauth from making tcp/ip magic cookie? It creates
> new .Xauthority file on every startx
> 3. Where xhost keeps its host records? man xhost tells me it is /etc/X*.hosts
> but in lunar there is no such file.
these questions are better off asked where people know the answer:
freedesktop.org. I personally don't even know the answer to this and I doubt
you can get a welinformed answer to these questions ;^)
Cheers,
Auke
More information about the Lunar
mailing list