On 12/28/2013 08:09, Eero Volotinen wrote:
> xhost + is very dangerous way to do that as it allows all clients to
> connect to display(s)
"Dangerous" depends on your local trust model.
Back when I was new to Unix -- a couple of decades ago, before
widespread firewalls and such -- we tended to trust LAN users
implicitly. That level of trust allowed some nice features that we've
had to give up in this more hostile modern world.
There once was a fun program you could run on a lab full of X Window
terminals or workstations that would march an Energizer Bunny from one
screen to the next, along the bottom edge of the screen. Can't do that
kind of thing now, thanks to security killjoys and the bad actors that
create jobs for them.
Two decades later, we're contemplating encrypting everything to the Nth
degree purely because there is so much mistrust -- and good reason for
that mistrust -- in the world.
This is an improvement?
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos
