[pkg-fso-maint] Bug#584411: mention network security
Nikita V. Youshchenko
yoush at debian.org
Thu Jun 3 14:14:57 UTC 2010
> But you neglect to mention one bit about the network. E.g,. in man xdm,
> we see
>
> allow-all-access
> Disables access control in the server. This can be used
> when the .Xauthority file cannot be created by xdm. Be
> very careful using this; it might be better to disconnect
> the machine from the network before doing this.
>
> So please also mention on the nodm README and man page, if one needs to
> take special steps after installing nodm to re-secure ones network, or
> if in fact, it is just as safe to connect ones computer to the network
> with nodm running as it was before. Thanks.
'allow-all-access' is about if X-protocol-level auth is turned on or off.
Athough I did not check, I believe that X server started by has
X-protocol-level auth enabled (which is the default anyway).
What arguments is X server started with when nodm starts it?
More information about the pkg-fso-maint
mailing list