[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Access Control behaves strange



On Tuesday 15 May 2001 22:16, Burkhard Perkens-Golomb wrote:
> During upgrade a warning appears that X starts now with "-nolisten
> tcp" :-) . See /etc/X11/kdm/Xservers, delete "-nolisten tcp".

No please don't delete it (without a good reason).  The problem can
be solved in two other ways without any security loss.
a) use ssh as described earlier or b) use :0 instead of localhost:0 and su -
After su - you can use (put it in a script) as root:

export DISPLAY=:0
xauth -f ~<my-normal-user>/.Xauthority extract - $DISPLAY | xauth merge -

> 
> Greetings to Wuppertal from Munich,

Second greeting to Wuppertal from Munich, and first one from Munich to Munich :)
> 
>          Burkhard
> 
> On Tue, 15 May 2001, Hubert Palme wrote:
> 
> > Hi,
> > 
> > avter my last upgrade of the Potato stuff yesterday, when I vane
> > another window open with another user (e.g. root), I xannot run X
> > applications:
> > 
> > # xemacs
> > Xlib: connection to ":0.0" refused by server
> > Xlib: Client is not authorized to connect to Server
> >  
> > Initialization error: X server not responding
> > : ":0.0"
> > #
> > 
> > KDE (or what else?) seems not to recognize localhost:
> > 
> > ~>xhost
> > access control enabled, only authorized clients can connect
> > INET:localhost
> > ~>
> > 
> > When I disable access control, it's OK (but a security hole :-()
> > 
> > What has changed with KDE?  (May be, I didn't read the debconf
> > screens coming up during the upgrade carefully enough?)
> > 
> > So what do I have to change in my configuration?
> > 
> > Thanks in advance,
> > 
> 
> 
> --  
> To UNSUBSCRIBE, email to debian-kde-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
> 
> 
> 

-- 
  To me vi is Zen.  To use vi is to practice zen. Every command is
  a koan. Profound to the user, unintelligible to the uninitiated.
  You discover truth everytime you use it.
                                      -- reddy@lion.austin.ibm.com



Reply to: