xhost list file

paranoid times · 06-28-2006, 02:54 PM

Ok the main problem: I want to set up xhost such that "xhost +" will not be enabled. I do not want users to be able to just have all hostnames access a system.

The minor problem is that I cannot find where xhost is keeping its list of hostnames that it will allow. The man page said that it would be /etc/X*.hosts but there is no such file that fits into that description. I know it is taking data, because I entered a few hostnames and here is the output that I get:

Code:

[root@cmi321 ~]# xhost
access control enabled, only authorized clients can connect
INET:cmi323.svl.ibm.com
INET:cmi322.svl.ibm.com

Thank you,
Michael

theNbomr · 06-30-2006, 04:13 PM

Your problem is basically the inverse of mine, but I think it points to the answer for you. There is a startup option for X '-nolisten <proto>', where proto is one of tcp, udp, others that I can't remember.

-nolisten tcp seems to override any xhost settings I apply. So far, I haven't been able to track down where this setting actually originates (and I'd like to remove it). I'd be grateful if someone can point this out.

I use Scientific Linux, which is basically a RHEL clone.

--- rod.

paranoid times · 06-30-2006, 04:46 PM

I can't find the config file (or I assume it is a config file) that you are refering to. Where would I find the X startup options (or where would I edit them)? Sorry I'm slow with this stuff.

-Michael

theNbomr · 06-30-2006, 04:56 PM

Good question. As soon as I figure it out, or someone tells me, I'll post it here.

--- rod.

paranoid times · 06-30-2006, 04:59 PM

Oh I see. Well I'll go hunting for X startup options. I get the feeling that I wont find anything, but if I do I'll post it here.

Thanks for your help.

gloomy · 07-02-2006, 10:37 AM

The config file, dependable on your distro, is located in the /bin directory of X.

In my system the file is:

Code:

/usr/X11R6/bin/startx

Hope this helped.

theNbomr · 07-02-2006, 01:56 PM

In my RHEL compatible system (Sceintific Linux), I had to edit

/etc/X11/gdm/gdm.conf

I had to un-comment

# DisallowTCP=true

and change it to

DisallowTCP=false

I hope this can help the original poster, paranoid times

Part of the trick for me was that I was trying to get the effect to take place by sending a SIGHUP to the X server. It needed a full restart to make it take effect.

--- rod.