[SOLVED] Strange remote X behaviour

Hello everyone,

I'd like to explain what I call a strange and insecure behaviour.
Or do I really miss something ?
The context:
A laptop called bata , a remote main machine called osiris.
Both running debian stretch (up to date)
bata is runnin the mate desktop

The problem:
I make a remote access with ssh -X osiris
iceweasel is running on bata.

When launching iceweasel on that session, I would expect a process running on osiris, displayed on bata.
However the called page appears as a new tab on bata's iceweasel process.

Note that, if no iceweasel process runs on bata, a remote iceweasel process is started, AS EXPECTED, on osiris and displayed on bata.

It's clear that process launched remotely (from xclock to amule), run on osiris, and are displayed on bata.

Can someone explain me this behaviour, witch seems a big security gap, and moreover disables the use of remote security settings ?

Thanks a lot.

Johan

Hi,

Can you try and start iceweasel on osiris with "iceweasel --no-remote"?

See https://www.linuxquestions.org/quest...on-4175487759/.

Hope this helps

Your hint solved the problem.
Unfortunately it does not give me the mechanism of this strange behaviour, that is, how does the remote machine communicate withe the local X server iceweasel process.

Thanx.
Johan