Re: allow display of different user's program window - how?

From: Dances With Crows (danSPANceswitTRAPhcrows_at_gmail.com)
Date: 03/28/05


Date: 28 Mar 2005 21:42:44 GMT

On 28 Mar 2005 13:14:49 -0800, hans_schulze98@yahoo.de staggered into
the Black Sun and said:
> Dances With Crows wrote:
>> On 28 Mar 2005 11:56:16 -0800, hans_schulze98@yahoo.de staggered into
>> the Black Sun and said:
>>> I am running KDE under SUSE. When I run xterm or Konsole, type "su
>>> otheruser" and then run a program that needs to open a window, it
>>> fails - no permission to open window. Even root cannot open a
>> slrnd3lqat.kd0.danSPANceswitTRAPhcrows@samantha.crow202.dyndns.org
>> into the "find messages with this Message-ID" field, then press
>> "search". You'll have to change kdm's config file and restart X to
>> get the xhost thing working as it used to work.
> So I should get rid of the "nolisten tcp"? Doesn't that mean that
> anyone in the world can try to connect to my X?

Nope. You do "xhost +localhost", and that means that anyone on
localhost (127.0.0.1) can connect to the X server. If you do "xhost +",
then anyone anywhere can connect to the X server, and that *is* a
problem. Routers and cablemodems and such are supposed to block packets
with bogus source IPs like 127.N.N.N. You can always use iptables to
block packets with destination port 6000, as well.

-- 
Matt G|There is no Darkness in Eternity/But only Light too dim for us to see
Brainbench MVP for Linux Admin /    mail: TRAP + SPAN don't belong
http://www.brainbench.com     /                Hire me! 
-----------------------------/ http://crow202.dyndns.org/~mhgraham/resume


Relevant Pages