Hello,

The easy answer is not to let untrusted applications connect to your
X-server... Run xterm locally and connect with no X-forwarding with ssh to
each vserver. But that does not answer your question.

It is possible to run some applications untrusted. Read "man xauth" and
search for "untrusted". This seem to work. Test with "xwininfo".

  cp ~/.Xauthority ~/.XauthorityUntrusted                                       
  export XAUTHORITY=~/.XauthorityUntrusted                            
  xauth generate $DISPLAY                                                       
  xterm                                                                         

But this does not work for many applications. One solution for them is to
use Xnest or Xvnc.

Regards,
Jerker Nyberg.
Uppsala, Sweden.


On Sun, 2 Nov 2003, GT wrote:

> Hi,
> 
> I wondered how it is possible to keep two vservers from keylogging each
> others root-passwords when entered in an xterm.
>
> Assuming two xterms are running under the same Xserver, each called
> from one of the two vservers.
> 
> Even with recent Xservers it is very simple to log an password entered
> at the "su -" prompt.
> 
> regards,
> gt
> _______________________________________________
> Vserver mailing list
> [EMAIL PROTECTED]
> http://list.linux-vserver.org/mailman/listinfo/vserver
> 



_______________________________________________
Vserver mailing list
[EMAIL PROTECTED]
http://list.linux-vserver.org/mailman/listinfo/vserver

Reply via email to