Le 22/09/2017 à 01:32, Arnt Karlsen a écrit :
The '-Y' option enables X11 forwarding. (This of course requires
sshd.)
You can probably justify 'xhost +' if this is one of those
I'm-the-only-user machines. Thank Ghu, remote network access to the X
server is no longer enabled by default on Linux hosts. (The right way
to do remote X11, IMO, is via 'ssh -yu...@example.com', thereby
forwarding X11 across the authenticated ssh tunnel.)
One can argue that you should use 'ssh -Y' even locally so you get out
of the habit of using 'xhost +'. I won't argue that, but will just
put it out there.
..my prefecence was the -X option: ssh -X root@localhost
until Debian killed it with some new policy.
AFAIR, ssh -Y is used for backward compatibility with old software
(like libroot), but, normally, -X is enough.
I don't know how one can prevent you from running ssh -X
root@localhost . Permission to do so is set/unset in /etc/ssh/sshd_config .
But gksu or gksudo do not require ssh at all.
Didier
_______________________________________________
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
