Re: X11 forward in F12

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Kevin,

On Tuesday 11 May 2010 09:13 PM, Kevin Fenzi wrote:
> On Tue, 11 May 2010 14:43:22 -0700
> Suvayu Ali<fatkasuvayu+linux@xxxxxxxxx>  wrote:
>
>> May I suggest using -Y instead of -X. Its supposed to be more secure.
>
> This is not a good idea. ;)
>
> If you use -X it uses all the regular xauth checks for access/security.
>
> If you use -Y it makes a 'trusted' forward. This could leave you
> exposed to remote access from a machine you have ssh'ed into.
> You should only use -Y in the very rare event that you have a app that
> doesn't work with -X.
>

I think the man page for ssh is a little misleading (mis-worded maybe?). 
I posted the relevant section from `man 5 ssh_config' in another message 
to this thread. That seems to imply otherwise.

I'm not at all well versed in anything X, given the above mentioned doc 
would you still think its better to use -X over -Y?

> kevin
>

-- 
Suvayu

Open source is the future. It sets us free.
-- 
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [EPEL Devel]     [Fedora Magazine]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Desktop]     [Fedora Fonts]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Fedora Sparc]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux