LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - General (https://www.linuxquestions.org/questions/linux-general-1/)
-   -   X11 Forwarding with -X and -Y. (https://www.linuxquestions.org/questions/linux-general-1/x11-forwarding-with-x-and-y-4175449728/)

echipbk 02-11-2013 06:09 PM

X11 Forwarding with -X and -Y.
 
I'd like to ask questions regarding that issue. I have 2 machines
- HP laptop is running Ubuntu 12.04
- Fujitsu tablet is running Fedora 18

Fujitsu plays the role of an SSH client (but X server)
HP laptop plays the role of an SSH server (but X client)

-------------------------

1. ssh -X HP_machine
This is OK for me

-------------------------

2. ssh -Y HP_machine
To be able to use the option -Y, we have to configure /etc/ssh/ssh_config on FUJITSU machine which is an X server.
ForwardX11Trusted yes

I read the following information at askubuntu.com:
http://askubuntu.com/questions/35512...sh-y-and-ssh-x

Quote:

If you use ssh -X remotemachine the remote machine is treated as an untrusted client. So your local client sends a command to the remote machine and receives the graphical output. If your command violates some security settings you'll receive an error instead.

But if you use ssh -Y remotemachine the remote machine is treated as trusted client. This last option can open security problems. Because other graphical (X11) client could sniff data from the remote machine (make screenshots, do keylogging and other nasty stuff) and it is even possible to alter those data.
There are 2 questions for this section:
- Do we configure "ForwardX11Trusted yes" on Fujitsu (not HP laptop)?
- Some security problems for ex: keylogging, making screenshot. This mean we can do those stuffs at HP machine. Can you give me an example of how to do that? (either keylogging or making screenshot). But that example should not work with "ssh -X ..." option.

-------------------------

3. Both -X and -Y
X forwarding doesn't seem to work with some applications. For ex, it worked fine with xterm and xeyes. However, when I ran $loffice (or $chromium-browser), these app GUIs didn't appear on my Fujitsu machine.
-> why is this?

Emerson 02-11-2013 06:16 PM

It's always best to let us know what's your goal.
Do you want to run an X application in one box and display it in another, on trusted network? If this is the case just use the X native mode. Log on to the remote box - doesn't matter how - start the app and direct the DISPLAY to your local box. Very easy and simple.

echipbk 02-11-2013 08:32 PM

I am experimenting X11 Forwarding. And there are some of the questions I posted on my first post. Thank you.


All times are GMT -5. The time now is 06:23 AM.