[Lazarus] Compiling lazarus in a headless server

Michael Schnell mschnell at lumino.de
Thu Nov 4 11:38:59 CET 2010


On 11/04/2010 10:24 AM, Graeme Geldenhuys wrote:
>
> You don't need to set X remote permissions

Man ssh says:

      -X      Enables X11 forwarding.  This can also be specified on a 
per-host basis in a configuration file.

              X11 forwarding should be enabled with caution.  Users with 
the ability to bypass file permissions on the remote host (for the 
user's X authorization database)
              can access the local X11 display through the forwarded 
connection.  An attacker may then be able to perform activities such as 
keystroke monitoring.

              For this reason, X11 forwarding is subjected to X11 
SECURITY extension restrictions by default.  Please refer to the ssh -Y 
option and the ForwardX11Trusted
              directive in ssh_config(5) for more information.

      -x      Disables X11 forwarding.

      -Y      Enables trusted X11 forwarding.  Trusted X11 forwardings 
are not subjected to the X11 SECURITY extension controls.





More information about the Lazarus mailing list