Subject: Re: X security query.
To: Aidan Kehoe <email@example.com>
From: Tom Ivar Helbekkmo <firstname.lastname@example.org>
Date: 05/06/2003 10:14:04
Aidan Kehoe <email@example.com> writes:
> The xman displays. Wtf? Is this to say, anyone with local access who can
> guess the name of my Xauthority file can pop up a window on my $DISPLAY?
If they have read access to said .Xauthority file, yes.
> Okay, so what do I have to do to turn off the ability of any local
> user to pop up a window on my display?
Nothing, because you already have proper protection of the file:
> 9:48PM ~ > ls -l ~aidan/.Xauthority
> -rw------- 1 aidan wheel 0 May 5 20:20 /home/aidan/.Xauthority
Tom Ivar Helbekkmo, Senior System Administrator, EUnet Norway
www.eunet.no T: +47-22092958 M: +47-93013940 F: +47-22092901