Hi Andrew,

as I know too little about xhost and security issues to really
comment on your comment, I have posted the matter on comp.lang.tcl.
Let us see what comes out of that.

Regards,

Arjen


> 
> Just to comment further, this issue has been around with Ubuntu (maybe also
> Debian?) for a while. It is not a security issue. The default ubuntu setup
> has xhost +SI:localuser:<username>, where username is the user logged on. 
> This allows the local user to display on the server - in particular it means
> that x programs started via sudo will correctly display. You can disable 
> this, but then things like the package manager which need to run as root 
> won't work. I don't think this particular use of xhost is a security issue,
> but tk is not that discriminating. The best course is probably to file a
> bug against the tk package in Ubuntu. By default you would expect it to
> work... The best solution would be a patch to tcl / tk to allow the localuser
> case.
> 

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Plplot-general mailing list
Plplot-general@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/plplot-general

Reply via email to