Douglas A. Tutty wrote:
I have a box that I want to keep as secure as I can but I also need to be able to use a graphical browser from it (I know that this is a trade-off).
Assuming you've already decided to run X, then why not just run the browser on your other machine and set the display to your server? Or use rdesktop to connect to a Windows machine or vnc client or whatever. That way any attacks would be an order of magnitude more difficult, an attacker would have to exploit a bug both in the browser and a bug in X.
