Re: Running remote X apps

[acmay at mace dot penguinpowered dot com]

The link seems to cover just about everything pretty well.

I never have gotten xauth working without using xdm, but since
I haven't used OS/2 much anymore I just use run level 5 in linux and 
start xdm automatically.

I have not dealt with the low level X stuff much, but I believe it
is possible to write a client that is hard to observer that just
captures all the keyboard access, and it is pretty easy to do a 
DoS by throwing up a lot of clients, and not to mention things
you wouldn't want your mother to see. So by just saying other
clients are "allowed to connect" seems to understatement the 
problem to me. People need to be aware that there are many bad
things that can happen besides a random X-Client popping up 
a window on their screen.

On Thu, Nov 30, 2000 at 08:45:54AM -0500, Harold Hunt wrote:
> In life one must find a balance between time for drinking beer and time for
> all other things; xauth requires too much beer time :)
> 
> I've never used xauth, but I will probably add a blurb about how dangerous
> and vile xhost is :)  I'm assuming that the xhost dangers you referred to
> were that host names can be spoofed and any user from an allowed host name
> is allowed to connect?  Was there anything else?
> 
> On a side note, I found "Remote X Apps mini-HOWTO" which has a pretty good
> discussion of the different ways to display remote X clients:
> http://www.xs4all.nl/~zweije/xauth.html
> 
> Harold
> 
> -----Original Message-----
> From: acmay@mace.penguinpowered.com
> [mailto:acmay@mace.penguinpowered.com]
> Sent: Thursday, November 30, 2000 2:24 AM
> To: Harold Hunt
> Cc: 'Timothy J. Massey'; Cygx (E-mail)
> Subject: Re: Running remote X apps
> 
> 
> Does xauth work yet?
> 
> xhost is pretty dangerous and you might want to at least mention why.
> 
> When I first started with X somebody gave me an real interesting
> picture for a background.
>