Re: XFree86

[Raphaël "\"SurcouF\" Bordet" <surcouf@choranche.grotte.org>]

Le mar, 30/03/2004 à 17:48 +0200, mammique a écrit :

> $ grep X11 /etc/ssh/sshd_config
> X11Forwarding yes
> X11DisplayOffset 10

Voir le changelog de ssh, 

$ zless /usr/share/doc/ssh/README.Debian.gz
[...]
OpenSSH 3.8 invented ForwardX11Trusted, which when set to no causes the
ssh client to create an untrusted X cookie so that attacks on the
forwarded X11 connection can't become attacks on X clients on the remote
machine. However, this has some problems in implementation - notably a
very short timeout of the untrusted cookie - breaks large numbers of
existing setups, and generally seems immature. The Debian package
therefore sets the default for this option to "no" (in ssh itself,
rather than in ssh_config).
[...]

cf. http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=237021...

-- 
Raphaël 'SurcouF' Bordet
surcouf@choranche.grotte.org