Aidan Kehoe <kehoea@parhasard.net> writes:

> The xman displays. Wtf? Is this to say, anyone with local access who can
> guess the name of my Xauthority file can pop up a window on my $DISPLAY?

If they have read access to said .Xauthority file, yes.

> Okay, so what do I have to do to turn off the ability of any local
> user to pop up a window on my display?

Nothing, because you already have proper protection of the file:

> 9:48PM ~ > ls -l ~aidan/.Xauthority
> -rw-------  1 aidan  wheel  0 May  5 20:20 /home/aidan/.Xauthority

-tih
-- 
Tom Ivar Helbekkmo, Senior System Administrator, EUnet Norway
www.eunet.no  T: +47-22092958 M: +47-93013940 F: +47-22092901