Re: X Security Issues? [SOLVED]

2002-11-22 Thread Peter Cordes
On Tue, Nov 19, 2002 at 09:35:36PM -0500, Edward Guldemond wrote: > On Wed, Nov 20, 2002 at 02:47:13AM +0100, Olaf Dietsche wrote: > > Well, it seems I should heed my own advice ;-). man xinit doesn't > > mention xserverrc, maybe this is a debian thing. But it does mention > > $HOME/.xserverrc; try

Re: X Security Issues? [SOLVED]

2002-11-22 Thread Peter Cordes
On Tue, Nov 19, 2002 at 09:35:36PM -0500, Edward Guldemond wrote: > On Wed, Nov 20, 2002 at 02:47:13AM +0100, Olaf Dietsche wrote: > > Well, it seems I should heed my own advice ;-). man xinit doesn't > > mention xserverrc, maybe this is a debian thing. But it does mention > > $HOME/.xserverrc; try

Re: X Security Issues? [SOLVED]

2002-11-20 Thread InfoEmergencias - Luis Gómez
El mié, 20-11-2002 a las 03:35, Edward Guldemond escribió: > Actually, I noticed something interesting when I was testing this out > on my home box. When I used "startx", X didn't listen on TCP. When I > used xinit, it did. I guess that xerverrc only gets read when you use > startx. IIRC, they

Re: X Security Issues? [SOLVED]

2002-11-20 Thread InfoEmergencias - Luis Gómez
El mié, 20-11-2002 a las 03:35, Edward Guldemond escribió: > Actually, I noticed something interesting when I was testing this out > on my home box. When I used "startx", X didn't listen on TCP. When I > used xinit, it did. I guess that xerverrc only gets read when you use > startx. IIRC, they

Re: X Security Issues? [SOLVED]

2002-11-19 Thread Edward Guldemond
On Wed, Nov 20, 2002 at 02:47:13AM +0100, Olaf Dietsche wrote: > Well, it seems I should heed my own advice ;-). man xinit doesn't > mention xserverrc, maybe this is a debian thing. But it does mention > $HOME/.xserverrc; try to link or copy /etc/X11/xinit/xserverrc to your > home dir as .xserverrc

Re: X Security Issues?

2002-11-19 Thread Olaf Dietsche
Edward Guldemond <[EMAIL PROTECTED]> writes: > On Wed, Nov 20, 2002 at 12:53:27AM +0100, Olaf Dietsche wrote: >> >> Look at "man xinit" and "man Xserver". There you will find an option >> "-nolisten". > > In /etc/X11/xinit/xserverrc, I have the following line: > exec /usr/bin/X11/X -dpi 100 -noli

Re: X Security Issues?

2002-11-19 Thread Edward Guldemond
On Tue, Nov 19, 2002 at 04:51:03PM -0800, Rick Moen wrote: > Quoting Edward Guldemond ([EMAIL PROTECTED]): > > > In /etc/X11/xinit/xserverrc, I have the following line: > > exec /usr/bin/X11/X -dpi 100 -nolisten tcp > > > > So why is X still listening on TCP? > > Because xdm/kdm/gdm don't heed /

Re: X Security Issues?

2002-11-19 Thread Rick Moen
Quoting Edward Guldemond ([EMAIL PROTECTED]): > In /etc/X11/xinit/xserverrc, I have the following line: > exec /usr/bin/X11/X -dpi 100 -nolisten tcp > > So why is X still listening on TCP? Because xdm/kdm/gdm don't heed /etc/X11/xinit/xserverrc, but rather /etc/X11/xdm/Xservers ? >> When this

Re: X Security Issues? [SOLVED]

2002-11-19 Thread Edward Guldemond
On Wed, Nov 20, 2002 at 02:47:13AM +0100, Olaf Dietsche wrote: > Well, it seems I should heed my own advice ;-). man xinit doesn't > mention xserverrc, maybe this is a debian thing. But it does mention > $HOME/.xserverrc; try to link or copy /etc/X11/xinit/xserverrc to your > home dir as .xserverrc

Re: X Security Issues?

2002-11-19 Thread Edward Guldemond
On Wed, Nov 20, 2002 at 12:53:27AM +0100, Olaf Dietsche wrote: > > Now, is there any security implications of having this port open? (I > > am nmap'ing this box's external Internet interface as it is my ipmasq > > box.) If so, what files do I have to edit to get rid of it? I don't > > need X lis

Re: X Security Issues?

2002-11-19 Thread Olaf Dietsche
Edward Guldemond <[EMAIL PROTECTED]> writes: > Starting nmap V. 2.54BETA31 ( www.insecure.org/nmap/ ) > Interesting ports on (removed) (XX.XX.XXX.XX): > (The 1552 ports scanned but not shown below are in state: closed) > Port State Service > 22/tcp openssh > 1024/tcp open

Re: X Security Issues?

2002-11-19 Thread Olaf Dietsche
Edward Guldemond <[EMAIL PROTECTED]> writes: > On Wed, Nov 20, 2002 at 12:53:27AM +0100, Olaf Dietsche wrote: >> >> Look at "man xinit" and "man Xserver". There you will find an option >> "-nolisten". > > In /etc/X11/xinit/xserverrc, I have the following line: > exec /usr/bin/X11/X -dpi 100 -noli

Re: X Security Issues?

2002-11-19 Thread Edward Guldemond
On Tue, Nov 19, 2002 at 04:51:03PM -0800, Rick Moen wrote: > Quoting Edward Guldemond ([EMAIL PROTECTED]): > > > In /etc/X11/xinit/xserverrc, I have the following line: > > exec /usr/bin/X11/X -dpi 100 -nolisten tcp > > > > So why is X still listening on TCP? > > Because xdm/kdm/gdm don't heed /

X Security Issues?

2002-11-19 Thread Edward Guldemond
All, I was doing a routine nmap of my network today, and noticed when I nmap'd a box running KDE that the following showed up: Starting nmap V. 2.54BETA31 ( www.insecure.org/nmap/ ) Interesting ports on (removed) (XX.XX.XXX.XX): (The 1552 ports scanned but not shown below are in state: closed) Po

Re: X Security Issues?

2002-11-19 Thread Rick Moen
Quoting Edward Guldemond ([EMAIL PROTECTED]): > In /etc/X11/xinit/xserverrc, I have the following line: > exec /usr/bin/X11/X -dpi 100 -nolisten tcp > > So why is X still listening on TCP? Because xdm/kdm/gdm don't heed /etc/X11/xinit/xserverrc, but rather /etc/X11/xdm/Xservers ? >> When this

Re: X Security Issues?

2002-11-19 Thread Edward Guldemond
On Wed, Nov 20, 2002 at 12:53:27AM +0100, Olaf Dietsche wrote: > > Now, is there any security implications of having this port open? (I > > am nmap'ing this box's external Internet interface as it is my ipmasq > > box.) If so, what files do I have to edit to get rid of it? I don't > > need X lis

Re: X Security Issues?

2002-11-19 Thread Olaf Dietsche
Edward Guldemond <[EMAIL PROTECTED]> writes: > Starting nmap V. 2.54BETA31 ( www.insecure.org/nmap/ ) > Interesting ports on (removed) (XX.XX.XXX.XX): > (The 1552 ports scanned but not shown below are in state: closed) > Port State Service > 22/tcp openssh > 1024/tcp open

X Security Issues?

2002-11-19 Thread Edward Guldemond
All, I was doing a routine nmap of my network today, and noticed when I nmap'd a box running KDE that the following showed up: Starting nmap V. 2.54BETA31 ( www.insecure.org/nmap/ ) Interesting ports on (removed) (XX.XX.XXX.XX): (The 1552 ports scanned but not shown below are in state: closed) Po