From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-14) on finch.gentoo.org
X-Spam-Level: *
X-Spam-Status: No, score=1.1 required=5.0 tests=DATE_IN_PAST_12_24,
	DMARC_MISSING,FSL_HELO_NON_FQDN_1,HELO_NO_DOMAIN,INVALID_DATE,
	MAILING_LIST_MULTI,RDNS_DYNAMIC autolearn=no autolearn_force=no
	version=4.0.0
Received: from as1-4-5-1.han.s.bonet.se ([194.236.131.211] helo=fry)
	by cvs.gentoo.org with esmtp (Exim 3.30 #1)
	id 15hACT-00026m-00
	for gentoo-dev@cvs.gentoo.org; Wed, 12 Sep 2001 07:37:09 -0600
Received: from fry (fry [127.0.0.1])
	by fry (Postfix) with ESMTP id 69118A8D5D
	for <gentoo-dev@cvs.gentoo.org>; Wed, 12 Sep 2001 15:35:27 +0200 (CEST)
Subject: Re: [gentoo-dev] how to close port 6000 in gentoo
From: Mikael Hallendal <micke@codefactory.se>
To: "Gentoo Dev." <gentoo-dev@cvs.gentoo.org>
In-Reply-To: <20010911220011.A9840@llama.dolly-llama.org>
References: <20010911220011.A9840@llama.dolly-llama.org>
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
X-Mailer: Evolution/0.13.99 (Preview Release)
Message-Id: <1000301727.639.8.camel@fry>
Mime-Version: 1.0
Sender: gentoo-dev-admin@cvs.gentoo.org
Errors-To: gentoo-dev-admin@cvs.gentoo.org
X-BeenThere: gentoo-dev@cvs.gentoo.org
X-Mailman-Version: 2.0
Precedence: bulk
Reply-To: gentoo-dev@cvs.gentoo.org
List-Help: <mailto:gentoo-dev-request@cvs.gentoo.org?subject=help>
List-Post: <mailto:gentoo-dev@cvs.gentoo.org>
List-Subscribe: <http://cvs.gentoo.org/mailman/listinfo/gentoo-dev>,
	<mailto:gentoo-dev-request@cvs.gentoo.org?subject=subscribe>
List-Id: Gentoo Linux development list <gentoo-dev.cvs.gentoo.org>
List-Unsubscribe: <http://cvs.gentoo.org/mailman/listinfo/gentoo-dev>,
	<mailto:gentoo-dev-request@cvs.gentoo.org?subject=unsubscribe>
List-Archive: <http://cvs.gentoo.org/pipermail/gentoo-dev/>
Date: Wed Sep 12 07:38:02 2001
X-Original-Date: 12 Sep 2001 15:35:27 +0200
X-Archives-Salt: 33ec5616-428c-4986-94dc-7c0ebb669c37
X-Archives-Hash: 1f228dcef004b867878173713fe1b05e

ons 2001-09-12 klockan 05.00 skrev Ben Lutgens:
> Hi all, by default in gentoo (as well as a few other distros as well) X is
> configured to listen on port 6000/tcp for remote X requests, this is a
> known security hazard.
> 
> If you're using xdm do the following:
> edit /etc/X11/xdm/Xservers to say
> 
> local /usr/X11R6/bin/X -nolisten tcp

Added this as default option in gdm (2.2.3.2-r1).

Regards,
  Mikael Hallendal

-- 
Mikael Hallendal                micke@codefactory.se
CodeFactory AB                  http://www.codefactory.se/
Office: +46 (0)8 587 583 05     Cell: +46 (0)709 718 918