[pkg-fso-maint] Bug#584411: mention network security

Nikita V. Youshchenko yoush at debian.org
Thu Jun 3 14:14:57 UTC 2010


> But you neglect to mention one bit about the network. E.g,. in man xdm,
> we see
>
>        allow-all-access
>               Disables access control in the server. This can be used
>               when the .Xauthority file cannot be created by xdm. Be
>               very careful using this; it might be better to disconnect
>               the machine from the network before doing this.
>
> So please also mention on the nodm README and man page, if one needs to
> take special steps after installing nodm to re-secure ones network, or
> if in fact, it is just as safe to connect ones computer to the network
> with nodm running as it was before. Thanks.

'allow-all-access' is about if X-protocol-level auth is turned on or off.

Athough I did not check, I believe that X server started by has 
X-protocol-level auth enabled (which is the default anyway).

What arguments is X server started with when nodm starts it?



More information about the pkg-fso-maint mailing list