On Fri, 22 Sep 2017 12:10:37 +0200, Didier wrote in message <9a258483-ff65-96a3-1ded-5bb121586...@in2p3.fr>:
> Le 22/09/2017 à 01:32, Arnt Karlsen a écrit : > >> The '-Y' option enables X11 forwarding. (This of course requires > >> sshd.) > >> > >> You can probably justify 'xhost +' if this is one of those > >> I'm-the-only-user machines. Thank Ghu, remote network access to > >> the X server is no longer enabled by default on Linux hosts. (The > >> right way to do remote X11, IMO, is via 'ssh -yu...@example.com', > >> thereby forwarding X11 across the authenticated ssh tunnel.) > >> > >> One can argue that you should use 'ssh -Y' even locally so you get > >> out of the habit of using 'xhost +'. I won't argue that, but will > >> just put it out there. > > ..my prefecence was the -X option: ssh -X root@localhost > > until Debian killed it with some new policy. > > AFAIR, ssh -Y is used for backward compatibility with old > software (like libroot), but, normally, -X is enough. > > I don't know how one can prevent you from running ssh -X > root@localhost . Permission to do so is set/unset > in /etc/ssh/sshd_config . ..ok, how? -- ..med vennlig hilsen = with Kind Regards from Arnt Karlsen ...with a number of polar bear hunters in his ancestry... Scenarios always come in sets of three: best case, worst case, and just in case. _______________________________________________ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
