[Sheflug] xhost

["Stephen J. Turnbull" <nospam [at] sk.tsukuba.ac.jp>]

>>>>> "Ross" == Ross's Mail <ross.h [at] ntlworld.com> writes:

    Ross> xhost +"ipaddress"

    Ross> export DISPLAY="ipaddress"

If ipaddress == ipaddress, yer hosed.  "ipaddress" on the machine you
run xhost on must be the ip address of the machine you export DISPLAY
on, and vice versa.

As Chris points out, the DISPLAY spec is hostspec:server.screen, where
the (optional, defaults to localhost) hostspec is an IP address,
domain name, or several more arcane possibilities, the server
(required) is a server number (TCP listener port - 6000), and screen
(optional, defaults to 0) is the screen number.

If for some reason you want a local X display, you use DISPLAY=":0" as
the setting.

As everybody has pointed out, use of xhost is hazardous.  Xauth, which
defaults to MIT-MAGIC-COOKIE, ain't great either but it's better than
IP-based authorization (== xhost).  For real security, a VPN, Kerberos,
or ssh forwarding are the ways to go.

-- 
University of Tsukuba                Tennodai 1-1-1 Tsukuba 305-8573 JAPAN
Institute of Policy and Planning Sciences       Tel/fax: +81 (298) 53-5091
_________________  _________________  _________________  _________________
What are those straight lines for?  "XEmacs rules."
---------------------------------------------------------------------
Sheffield Linux User's Group - http://www.sheflug.co.uk
To unsubscribe from this list send mail to
- <sheflug-request [at] vuw.ac.nz> - with the word 
 "unsubscribe" in the body of the message. 

  GNU the choice of a complete generation.