Re: allow display of different user's program window - how?

From: Dances With Crows (danSPANceswitTRAPhcrows_at_gmail.com)
Date: 03/29/05 

Date: 29 Mar 2005 00:55:03 GMT

On 28 Mar 2005 16:28:05 -0800, hans_schulze98@yahoo.de staggered into
the Black Sun and said:
> Dances With Crows wrote:
>> You can always do "ssh -l $USERNAME -X localhost", although that'll
>> have higher overhead than the xhost thing because you've involved
> You can't if there isn't a sshd server running.

So run one if you want to. Look, there are basically 4 ways to do what
you've said you want to do (xhost and removing nolisten tcp, kdesu, ssh
-X localhost, xauth), and you've found fault with all of the ones you've
tried so far. If you find them all lacking in some way, you're going to
have to go write some code. That's fine, just know what you're getting
into if you go that route.

> Noone needs to connect remotely to my machine, so I don't want to set
> one up.

Set its ListenAddress to 127.0.0.1 in /etc/ssh/sshd_config and nobody
from any other machine will be able to log in via ssh, since sshd is
only listening on the loopback interface.

>> you could try using xauth, though the supplied man page for that tool
>> is less than useful.
> I've never used the magic cookie scheme,

Magic cookies are used by default in a vanilla X setup. Open up an
xterm, "mv ~/.Xauthority ~/.Xauthority.old" , and then try to start
another xterm. You probably won't be able to unless you mv the file
back.

> but I get the impression that it's old, inconvenient, and maybe not
> very secure.

It was a big improvement over what came before. X has been around for a
long time, and some things (like magic cookies and the Athena widgets)
have stuck around long enough that they've got mold growing all over
them. Maybe the Xorg people have a brilliant new idea they're going to
implement. I wouldn't hold out much hope for that, since the magic
cookies will have to stick around for a while thanks to backwards
combatability. 

-- 
Matt G|There is no Darkness in Eternity/But only Light too dim for us to see
Brainbench MVP for Linux Admin /    mail: TRAP + SPAN don't belong
http://www.brainbench.com     /                Hire me! 
-----------------------------/ http://crow202.dyndns.org/~mhgraham/resume