-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 06/23/2012 09:41 AM, Christoph A. wrote: >>> The second patch only adds '-nolisten tcp' to Xephyr, but if there are >>>> use cases where one needs Xephyr to open a listener this patch will >>>> break thinks. >>>> >> I am adding this also, since it is more secure. I do not know of >> anything that will break. > > > Looks like in F17 the '-nolisten tcp' options was removed: (/usr/bin/Xephyr > -title "$TITLE" -terminate -screen $SCREENSIZE -dpi $DPI -displayfd 5 5>&1 > 2>/dev/null) > > was there a specific reason for this? > > I don't remember adding this and it is not in F16 either. If it works, it probably is a good idea to add it. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk/oXXoACgkQrlYvE4MpobN0AwCgrX/F+SgDOBhAdsystqPAgQ4Z Hi8An2U3gGnWHpIE3AGJfmmWbIbasi3g =dTJE -----END PGP SIGNATURE----- -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux