LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 02-13-2015, 04:25 PM   #1
rasy
LQ Newbie
 
Registered: Feb 2015
Posts: 11

Rep: Reputation: Disabled
security risks


Are there any security risks by allowing another machine to use my computer as an X server?
 
Old 02-13-2015, 07:46 PM   #2
jpollard
Senior Member
 
Registered: Dec 2012
Location: Washington DC area
Distribution: Fedora, CentOS, Slackware
Posts: 4,912

Rep: Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513
Of course.

This can be minimized by using ssh to pass the X protocol. The advantage is that the data is encrypted. There is also a bit of compression going on...

ssh also sets up unprivileged keys so that the remote host will be unable to do certain things. One is that you can't remotely lock the screen, but there are other things that could happen.

Some of the issues that will remain is that audio devices don't work (that isn't part of the X protocol). And if you do manage to enable remote audio (it isn't exactly impossible - but it requires port forwarding which is usually disabled, and a client/server connection to forward the data. This would usually introduce too much delay).
 
Old 02-14-2015, 01:46 PM   #3
LinuxUser42
Member
 
Registered: Nov 2010
Distribution: Lubuntu, Raspbian, Openelec, messing with others.
Posts: 143

Rep: Reputation: 19
Why would your machine be an X server? Is this some sort of Demo on your machine, that is run remotely? (verses running VNC or the like) Or do you mean running X client on your machine? (server is the one where X appears)
 
Old 02-14-2015, 03:27 PM   #4
jpollard
Senior Member
 
Registered: Dec 2012
Location: Washington DC area
Distribution: Fedora, CentOS, Slackware
Posts: 4,912

Rep: Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513
Quote:
Originally Posted by LinuxUser42 View Post
Why would your machine be an X server? Is this some sort of Demo on your machine, that is run remotely? (verses running VNC or the like) Or do you mean running X client on your machine? (server is the one where X appears)
It is an X server if it displays windows from an application using X for display... And it doesn't matter whether that application is on the same machine or one across the country.

The disadvantage for the "across the country" is that the straight X connections are not encrypted - thus you use ssh to provide encryption, and it tunnels the data from "across the country".

NORMALLY, Linux X servers do not support TCP. This is because of the insecurity that was imposed from way back (encryption was a munitions). ssh provides a tunnel that provides the encryption - and passes the packets to the X server via the UNIX domain socket used by the X server.
 
Old 02-15-2015, 02:37 AM   #5
LinuxUser42
Member
 
Registered: Nov 2010
Distribution: Lubuntu, Raspbian, Openelec, messing with others.
Posts: 143

Rep: Reputation: 19
Quote:
Originally Posted by jpollard View Post
It is an X server if it displays windows from an application using X for display... And it doesn't matter whether that application is on the same machine or one across the country.

The disadvantage for the "across the country" is that the straight X connections are not encrypted - thus you use ssh to provide encryption, and it tunnels the data from "across the country".

NORMALLY, Linux X servers do not support TCP. This is because of the insecurity that was imposed from way back (encryption was a munitions). ssh provides a tunnel that provides the encryption - and passes the packets to the X server via the UNIX domain socket used by the X server.
Maybe I should refraise it. I am trying to figure out what GUI application, is going to be run on his machine, where the user/operator can't see the results.
How I get, the why, not so much.
 
Old 02-15-2015, 06:44 AM   #6
jpollard
Senior Member
 
Registered: Dec 2012
Location: Washington DC area
Distribution: Fedora, CentOS, Slackware
Posts: 4,912

Rep: Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513
None.

The GUI application runs on the remote machine, using the ssh connection to forward the X packet to the local X server running on his workstation.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: Eight Steps to Eliminating Security Risks in WordPress LXer Syndicated Linux News 0 08-04-2014 02:50 PM
Security risks using talk Bendude Linux - Security 20 07-29-2008 05:55 AM
hosting web and e-mail security risks metallica1973 Linux - Security 8 04-10-2006 09:39 AM
what are the security risks using 'passwd' in shell scripts? MisterESauce Linux - Security 5 04-10-2005 01:48 PM
samba/apache machine security risks fatman Linux - Networking 1 01-16-2004 09:31 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 09:14 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration