[ubuntu-hardened] Securing access to the X Server.

[daniel curtis]

Hi

Thanks for an informations. Frankly I didn't know - or don't remember -
that /etc/X11/xinit/xserverrc file already have the '-nolisten tcp' option.
(What a shame) But that's good.

I'm just wondering if it is not true, that since pretty long time, this
option is used by other Linux Distributions? It's just my thinking and is
not related with this subject ("Securing access to the X Server"). Nothing
more, nothing less.

So, if Ubuntu 12.04 uses gnome-screensaver by default, not XScreenServer
then editing /etc/X11/app-defaults/XScreenSaver file is not necessary,
right?

The same thing about xhost(1): "no changes necessary" - okay. At last;
since default 12.04 Release installation disallow remote X connections, it
seems everything is configured correctly if it's about security etc. No
action needed.

Thank You for an answer and clarifications. It was very valuable.

Best regards.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-hardened/attachments/20161020/a3268d6b/attachment.html>