changing user with SU, gives "Xlib: connection to ":0.0" refused by server" (Partily solved)

Mon Oct 8 16:08:06 UTC 2007

On Monday 08 October 2007 16:57:35 Andrew Glen-Young wrote:
> On 08/10/2007, (``-_-´´) -- Fernando <Ubuntu at bugabundo.net> wrote:
> > Got this
> > $ xhost +OTHERUSER
> > xhost:  bad hostname "OTHERUSER"
> 
> Curiosity got the better of me.
> Try just 'xhost +'.
> 
> $ xhost +
> access control disabled, clients can connect from any host
> 
> I don't think that this is the best of ideas, but since the Ubuntu
> Xserver doesn't listen on any network ports be default, it should be safe.

$ xhost +
access control disabled, clients can connect from any host
$ sudo -u OTHERUSER gedit
[sudo] password for MYUSER:

(gedit:27092): GnomeUI-WARNING **: While connecting to session manager:
Authentication Rejected, reason : None of the authentication protocols specified are supported and host-based authentication failed.

But it ended up opening gedit. so it works.
How unsafe is this? I dont think I have the default config, so I might have extra ports open.

$ sudo netstat -puta
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name   
tcp        0      0 *:submission            *:*                     LISTEN     7163/master         
tcp        0      0 *:x11                   *:*                     LISTEN     7692/X              
tcp        0      0 *:ssmtp                 *:*                     LISTEN     7163/master         
tcp        0      0 rhino.:domain *:*                     LISTEN     6843/pdns_recursor  
tcp        0      0 rhino.:ipp *:*                     LISTEN     6802/cupsd          
tcp        0      0 *:smtp                  *:*                     LISTEN     7163/master         
tcp6       0      0 *:submission            *:*                     LISTEN     7163/master         
tcp6       0      0 *:5900                  *:*                     LISTEN     10140/vino-server   
tcp6       0      0 *:x11                   *:*                     LISTEN     7692/X              
tcp6       0      0 *:ssmtp                 *:*                     LISTEN     7163/master         
tcp6       0      0 *:ssh                   *:*                     LISTEN     6748/sshd           
tcp6       0      0 *:smtp                  *:*                     LISTEN     7163/master         
udp        0      0 *:32774                 *:*                                7560/avahi-daemon:  
udp        0      0 rhino.BUGabundo.:domain *:*                                6843/pdns_recursor  
udp        0      0 *:bootpc                *:*                                8949/dhclient       
udp        0      0 *:mdns                  *:*                                7560/avahi-daemon:  
udp        0      0 *:ipp                   *:*                                6802/cupsd          
udp6       0      0 *:xdmcp                 *:*                                7685/gdm 

-- 
BUGabundo  :o)
(``-_-´´)	http://Ubuntu.BUGabundo.net
Linux user #443786    GPG key 1024D/A1784EBB
My new micro-blog @ http://BUGabundo.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20071008/2779f355/attachment.sig>