[gentoo-dev] how to close port 6000 in gentoo

[gentoo-dev] how to close port 6000 in gentoo

[Ben Lutgens]

[-- Attachment #1: Type: text/plain, Size: 492 bytes --]

Hi all, by default in gentoo (as well as a few other distros as well) X is
configured to listen on port 6000/tcp for remote X requests, this is a
known security hazard.

If you're using xdm do the following:
edit /etc/X11/xdm/Xservers to say

local /usr/X11R6/bin/X -nolisten tcp

I also recommend not using xfs since X cant handle fonts without it. 

-- 
Ben Lutgens		
Sistina Software Inc.	

What's the difference between root and God ?
God doesn't think that he is root. 

[-- Attachment #2: Type: application/pgp-signature, Size: 232 bytes --]

Re: [gentoo-dev] how to close port 6000 in gentoo

[Einar Karttunen]

On Tue, Sep 11, 2001 at 10:00:11PM -0500, Ben Lutgens wrote:
> Hi all, by default in gentoo (as well as a few other distros as well) X is
> configured to listen on port 6000/tcp for remote X requests, this is a
> known security hazard.
> 
> If you're using xdm do the following:
> edit /etc/X11/xdm/Xservers to say
> 
> local /usr/X11R6/bin/X -nolisten tcp
> 
> I also recommend not using xfs since X cant handle fonts without it. 
> 
Is there anyway to do this if one is not using xdm?
A solution working for xinit is good, but isn't there
any way of making this default short of compiling X
from scratch?

- Einar Karttunen

Re: [gentoo-dev] how to close port 6000 in gentoo

[Chris Houser]

Einar Karttunen wrote:                [Wed Sep 12 2001,  5:16:49AM EDT]         
> On Tue, Sep 11, 2001 at 10:00:11PM -0500, Ben Lutgens wrote:
> > If you're using xdm do the following:
> > edit /etc/X11/xdm/Xservers to say
> > 
> > local /usr/X11R6/bin/X -nolisten tcp
> Is there anyway to do this if one is not using xdm?

I added to the serverargs in my startx script, like this:

    # chouser's paranoia
    serverargs="$serverargs -nolisten tcp"

--Chouser

Re: [gentoo-dev] how to close port 6000 in gentoo

[Mikael Hallendal]

ons 2001-09-12 klockan 05.00 skrev Ben Lutgens:
> Hi all, by default in gentoo (as well as a few other distros as well) X is
> configured to listen on port 6000/tcp for remote X requests, this is a
> known security hazard.
> 
> If you're using xdm do the following:
> edit /etc/X11/xdm/Xservers to say
> 
> local /usr/X11R6/bin/X -nolisten tcp

Added this as default option in gdm (2.2.3.2-r1).

Regards,
  Mikael Hallendal

-- 
Mikael Hallendal                micke@codefactory.se
CodeFactory AB                  http://www.codefactory.se/
Office: +46 (0)8 587 583 05     Cell: +46 (0)709 718 918