[ILUG] XEmacs....acting up a bit....

[Paul Jakma]

On Wed, 14 Mar 2001, Conor Daly wrote:

> Can someone point me to the reasons why xhost is a Bad Idea (TM)?

cause it makes no distinction as to the user, for localhost it's ok
as long as localhost is not a multi-user box. for anything else it's
way way bad - your entire X session is snoopable from any user on a
machine allowed to connect by xhost.

use xauth instead:

[paul at fogarty pin2stage]$ xauth list
fogarty.jakma.org:0  MIT-MAGIC-COOKIE-1  ffffffffffffffffffffffffffffffff
fogarty.jakma.org/unix:0  MIT-MAGIC-COOKIE-1 ffffffffffffffffffffffffffffffff
fogarty.jakma.org/unix:1  MIT-MAGIC-COOKIE-1 ffffffffffffffffffffffffffffffff
fogarty.jakma.org:1  MIT-MAGIC-COOKIE-1  ffffffffffffffffffffffffffffffff

[root at hibernia foo]# xauth list
[root at hibernia foo]# export DISPLAY=fogarty.jakma.org:0.0
[root at hibernia foo]# xauth add $DISPLAY  MIT-MAGIC-COOKIE-1  \
ffffffffffffffffffffffffffffffff
[root at hibernia foo]# xauth list
fogarty.jakma.org:0  MIT-MAGIC-COOKIE-1 ffffffffffffffffffffffffffffffff
[root at hibernia foo]#

regards,
-- 
Paul Jakma	paul at clubi.ie	paul at jakma.org
PGP5 key: http://www.clubi.ie/jakma/publickey.txt
-------------------------------------------
Fortune:
All programmers are playwrights and all computers are lousy actors.