Hello,

Regarding bug #529306, there is a possible detection of the xauth
magic-cookie. The attached debdiff file adds two patches to the
current slim package in Lenny. The first that instead of setting the
mcookie within the command line of xauth, it passes it through a pipe.
The second that instead of using the pid+time to generate a random
mcookie, uses srandom to make the cookie less predictable.

Regards
Mike

Attachment: slim_1.3.0-1+lenny2.debdiff
Description: Binary data

Reply via email to