Re: 10.5.5 broke X11
Re: 10.5.5 broke X11
- Subject: Re: 10.5.5 broke X11
- From: Jeremy Huddleston <email@hidden>
- Date: Fri, 19 Sep 2008 15:30:51 -0700
On Sep 19, 2008, at 05:33, Robert Black wrote:
Dear Harald:
As you can see below, there is no xhost command in that script on my
machine. I was asked to print that script by some of the other folks
monitoring this list as well, unless it is buried somewhere such as
in /usr/bin/X11/startx.
I put the xhost + in my .profile because I often connect to other
UNIX servers and display on my Mac, using the Mac an an X-terminal.
While that is a bad decision for so many security reasons, it is still
the wrong place to put it. That belongs in a ~/.xinitrc, not in a
~/.profile.
Why anyone writing the OS would want to issue such a command on
startup is a mystery to me.
Well, we didn't put it there, I assure you... so nobody "writing the
OS" has done that.
I just tried connecting without it, and the server could not open
the display, so I guess I'll have to issue the xhost + command
manually since the one issued by the startup script doesn't do it.
Or just use ssh with X11 forwarding or use xauth or put it in your
~/.xinitrc ..
.
New - when I open an xterm window, manually issue the xhost +,
rlogin to my favorite server, and set the DISPLAY to my Mac, I now
can't display. This is another functionality that broke with 10.5.5
that was working at 10.5.4
Check your security settings in X11 preferences. You need to change
those to make your system vulnerable to the security hole you want to
open up.
And, BTW, my Mac is within a protected network behind a Sun Solaris
server acting as the firewall.
Well, that's a good thing...
Attachment:
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________
Do not post admin requests to the list. They will be ignored.
X11-users mailing list (email@hidden)
This email sent to email@hidden