On Mon, Aug 26, 2002 at 07:21:22PM -0500, Matthew Kennedy wrote:
> [email protected] writes:
>
> > On Mon, Aug 26, 2002 at 01:20:24PM +0100, Toby Dickenson wrote:
> > > On Sunday 25 August 2002 23:24, [email protected] wrote:
> > > > On Sun, Aug 25, 2002 at 06:11:25PM -0400, Bob Paddock wrote:
> > > > > If I'm logged in as 'bob' and I su root, then try to start some thing
> > > > > like emacs I get this:
> > > > >
> > > > >
> > > > > root@bob cups # emacs error_log&
> > > > > [1] 6860
> > > > > root@bob cups # Xlib: connection to ":0.0" refused by server
> > > > > Xlib: No protocol specified
> > > > >
> > > > > emacs: Cannot connect to X server :0.0.
> > > > > Check the DISPLAY environment variable or use `-d'.
> > > > > Also use the `xhost' program to verify that it is set to permit
> > > > > connections from your machine. [This is the same machine!?]
> > >
> > > I you use 'su -' it will clear all environment variables such as DISPLAY, and
> > > you will be able to use a text mode emacs.
> > >
> > > > before you su, type 'xhost +localhost'
> > >
> > > Eeeek. It depends on the configuration of your machine (of course), but using
> > > xhost like that is likely to be a security problem. It means that any process
> > > on your machine can connect to your X server to snoop on your windows, record
> > > keystrokes, etc.
> >
> > afaik, there's only a security problem when you type xhost +
> > it says: access control disabled, clients can connect from any host
> > but, when you type xhost +localhost only the localhost is allowed to
> > make connections. don't think that is a security hole. (if i'm not
> > mistaken)
> >
>
> I believe it is, if you have multiple users on the one machine ;)
indeed, that's true.
didn't think about that, i'm the only user on my machine :-)
time to do some experiments...
>
> --
> Matthew Kennedy
> Gentoo Linux Developer
> Bugs go to http://bugs.gentoo.org!
>
> _______________________________________________
> gentoo-newbies mailing list
> [email protected]
> http://lists.gentoo.org/mailman/listinfo/gentoo-newbies
lmpx.com only provides a reader for public news (NNTP) servers. It is not
affiliated with the servers or forums shown here and is not responsible for
the content of articles, which is written by their respective authors.