Sujet : Re: Wayland Is Coming
De : ldo (at) *nospam* nz.invalid (Lawrence D'Oliveiro)
Groupes : comp.windows.xDate : 12. May 2024, 01:51:06
Autres entêtes
Organisation : A noiseless patient Spider
Message-ID : <v1p3pp$2ake7$8@dont-email.me>
References : 1 2 3 4 5 6 7 8 9 10 11 12
User-Agent : Pan/0.155 (Kherson; fc5a80b8)
On Sat, 11 May 2024 08:58:29 -0000 (UTC), Muttley wrote:
On Fri, 10 May 2024 21:56:59 -0000 (UTC)
Lawrence D'Oliveiro <ldo@nz.invalid> wrote:
>
On Fri, 10 May 2024 08:32:51 -0000 (UTC), Muttley wrote:
>
SSH is the door, whatever is tunnelled is behind it.
>
Which is where I point out that SSH does not validate who or what is
going through its tunnelled port. It is wide open to any process on the
remote machine.
If you don't want remote machines to connect to X then
either use xhost to set up whitelists
Note that xhost only offers host-level access control: you can’t restrict
accesses from arbitrary processes on the remote machine.
I did say the door was made of cardboard, didn’t I?
... or disable the TCP connection entirely. Simple.
In other words, disable the tunnelling you thought was such a good idea?
Wayland Is Coming
Re: Wayland Is Coming