From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-14) on finch.gentoo.org X-Spam-Level: ** X-Spam-Status: No, score=2.1 required=5.0 tests=DATE_IN_PAST_24_48,DMARC_NONE, INVALID_DATE,MAILING_LIST_MULTI,RDNS_NONE autolearn=no autolearn_force=no version=4.0.0 Received: from [216.17.46.92] (helo=llama.sistina.com ident=llama@llama.org) by cvs.gentoo.org with esmtp (Exim 3.30 #1) id 15h0H8-0007d9-00 for gentoo-dev@gentoo.org; Tue, 11 Sep 2001 21:01:18 -0600 Received: from blutgens by llama.sistina.com with local (Exim 3.32 #1) id 15h0G3-0002aS-00 for gentoo-dev@gentoo.org; Tue, 11 Sep 2001 22:00:11 -0500 From: Ben Lutgens To: gentoo-dev@gentoo.org Message-ID: <20010911220011.A9840@llama.dolly-llama.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="dDRMvlgZJXvWKvBx" Content-Disposition: inline User-Agent: Mutt/1.2.5i X-Mailer: telnet yourmailserver 25 Subject: [gentoo-dev] how to close port 6000 in gentoo Sender: gentoo-dev-admin@cvs.gentoo.org Errors-To: gentoo-dev-admin@cvs.gentoo.org X-BeenThere: gentoo-dev@cvs.gentoo.org X-Mailman-Version: 2.0 Precedence: bulk Reply-To: gentoo-dev@cvs.gentoo.org List-Help: List-Post: List-Subscribe: , List-Id: Gentoo Linux development list List-Unsubscribe: , List-Archive: Date: Tue Sep 11 21:02:01 2001 X-Original-Date: Tue, 11 Sep 2001 22:00:11 -0500 X-Archives-Salt: ef9d4609-1490-47d0-8361-af0e6488e574 X-Archives-Hash: acecbafdcc4b30cf58017eaba440b963 --dDRMvlgZJXvWKvBx Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi all, by default in gentoo (as well as a few other distros as well) X is configured to listen on port 6000/tcp for remote X requests, this is a known security hazard. If you're using xdm do the following: edit /etc/X11/xdm/Xservers to say local /usr/X11R6/bin/X -nolisten tcp I also recommend not using xfs since X cant handle fonts without it.=20 --=20 Ben Lutgens =09 Sistina Software Inc.=09 What's the difference between root and God ? God doesn't think that he is root.=20 --dDRMvlgZJXvWKvBx Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE7ns+7LxkxGgLdGQgRAnelAJ9V79EaepXtgJAzUkR0x6fJJGxMRQCfY4DF QUOZYCrRQCwm2qIFvRa+wws= =VvQf -----END PGP SIGNATURE----- --dDRMvlgZJXvWKvBx--