On Tue, 14 May 2024 21:52:49 -0000 (UTC)
Lawrence D'Oliveiro <ldo@nz.invalid> wrote:
On Mon, 13 May 2024 10:31:50 +0000 (UTC), Julian Bradfield wrote:
The socket is usually called /tmp/.X11-unix/Xn for display n.
The socket *has* to be called X«n», and be located in /tmp/.X11-unix/.
In one post you're claiming X doesn't use unix sockets, now you're an
expert on what the permissions should be.
Which is a world-writable directory. You see the problem?
Its not a problem , its part of the design.
The Wayland socket goes in $XDG_RUNTIME_DIR, which is a variable under
the control of the user. It usually points to /run/user/«userid». Which >>belongs to that specific user.
Very useful if a process running under another user id wants to connect.
Lawrence doesn't seem to understand ~/.Xauthority ...
ssh does though -- if you forward an X connection through ssh,
it will manage the necessary .Xauthority entries with xauth(1).
This completely invalidates the "X over ssh is insecure" argument.
On Wed, 15 May 2024 16:31:02 -0000 (UTC), vallor wrote:
Lawrence doesn't seem to understand ~/.Xauthority ...
ssh does though -- if you forward an X connection through ssh,
it will manage the necessary .Xauthority entries with xauth(1).
And hopefully it manages to clean that up as well, when you drop the >connection.
This completely invalidates the "X over ssh is insecure" argument.
It does take an awful lot of pieces, working together correctly, to ensure >this, doesn’t it?
Wayland is somewhat simpler than this.
Sysop: | Keyop |
---|---|
Location: | Huddersfield, West Yorkshire, UK |
Users: | 388 |
Nodes: | 16 (2 / 14) |
Uptime: | 09:19:19 |
Calls: | 8,221 |
Files: | 13,122 |
Messages: | 5,872,624 |