Re: Xterm, Cygwin, etc

2011-08-02 Thread Richard Troth
As I already hinted, I don't see a problem with X security per se.
You are probably seeing or hearing about security issues because of
cases where people disable X security.

For decades, X has had its own crude 'xauth' control.  The trick is to
prevent hijacks of that, protection which is commonly
available.

CYGWIN/X can be locked down just like other X servers.  (Here we are
not addressing Windows security concerns.)  Given that, an 'xterm'
running on it is not a serious risk.  Within that 'xterm', run 'ssh'
with X tunneling, and your remote X apps are similarly secured.  (Here
we are not addressing security concerns on the target, which could be
any op sys.)

Summary:  don't fear X,  don't fear CYGWIN.

-- R;   
Rick Troth
Velocity Software
http://www.velocitysoftware.com/





On Mon, Aug 1, 2011 at 14:47, Gentry, Steve
steve.gen...@westernsouthernlife.com wrote:
 I still like to occasionaly connect to zLinux and use the GUI Desktop
 interface. IIRC, Xterm isn't a good option because of security issues.
 What is the preferred method, these days, to use the GUI Desktop?
 (Yes, I realize that using the GUI, Desktop isn't the best thing to do)
 Thanks,
 Steve

 --
 For LINUX-390 subscribe / signoff / archive access instructions,
 send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
 http://www.marist.edu/htbin/wlvindex?LINUX-390
 --
 For more information on Linux on System z, visit
 http://wiki.linuxvm.org/


--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: Xterm, Cygwin, etc

2011-08-01 Thread Scott Rohling
vnc is what I use..startup vncserver on zLinux .. use a vnc client (
tightvnc.org has a free one) to connect.  You can also use a web browser and
the 58xx port.  Need the firewall to allow 59xx and/or 58xx ports.

Scott Rohling

On Mon, Aug 1, 2011 at 12:47 PM, Gentry, Steve 
steve.gen...@westernsouthernlife.com wrote:

 I still like to occasionaly connect to zLinux and use the GUI Desktop
 interface. IIRC, Xterm isn't a good option because of security issues.
 What is the preferred method, these days, to use the GUI Desktop?
 (Yes, I realize that using the GUI, Desktop isn't the best thing to do)
 Thanks,
 Steve

 --
 For LINUX-390 subscribe / signoff / archive access instructions,
 send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
 visit
 http://www.marist.edu/htbin/wlvindex?LINUX-390
 --
 For more information on Linux on System z, visit
 http://wiki.linuxvm.org/


--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: Xterm, Cygwin, etc

2011-08-01 Thread Richard Troth
Hi, Steve, --

Actually, there is not necessarily a security problem with 'xterm'.
But for the moment, I will defer that discussion.

For remote desktop, I use VNC heavily.  You get good security if you
lock down VNC where it runs (ie: set it to reject remote connections)
and then connect via tunnel over SSH.  If you have a VNC already up
remotely, then connect something like this ...

ssh -n -L 5910:127.0.0.1:5910 thedesktop sleep 30 
vnc viewer :10

(Above assumes you are display :10.  Change the last two digits of the
59xx port to match what VNC tells you.)  Where thedesktop is the
system where your virtual VNC desktop is running.  You get a secure
tunnel from port 5910 locally to 127.0.0.1 port 5910 on the target
system.  There is overhead, but VNC is somewhat less chatty than X
itself.

In my experiences, VNC comes up with TWM -or- with no window manager
by default.  It is really easy to kill TWM if started and then to
bring up GNOME or KDE in either case.  The biggest problem I have is
sometimes ugly color planes.  (Also lack of audio, if that matters.)

There are other remote desktop solutions.

-- R;   
Rick Troth
Velocity Software
http://www.velocitysoftware.com/





On Mon, Aug 1, 2011 at 14:47, Gentry, Steve
steve.gen...@westernsouthernlife.com wrote:
 I still like to occasionaly connect to zLinux and use the GUI Desktop
 interface. IIRC, Xterm isn't a good option because of security issues.
 What is the preferred method, these days, to use the GUI Desktop?
 (Yes, I realize that using the GUI, Desktop isn't the best thing to do)
 Thanks,
 Steve

 --
 For LINUX-390 subscribe / signoff / archive access instructions,
 send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
 http://www.marist.edu/htbin/wlvindex?LINUX-390
 --
 For more information on Linux on System z, visit
 http://wiki.linuxvm.org/


--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/