From owner-freebsd-gnome@FreeBSD.ORG Thu Mar 31 17:57:01 2005 Return-Path: Delivered-To: freebsd-gnome@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2FEC216A4CE for ; Thu, 31 Mar 2005 17:57:01 +0000 (GMT) Received: from relay.pixi.com (relay.pixi.com [206.127.224.101]) by mx1.FreeBSD.org (Postfix) with ESMTP id C568443D1D for ; Thu, 31 Mar 2005 17:57:00 +0000 (GMT) (envelope-from knowtree@aloha.com) Received: from carter.pixi.com ([206.127.224.102]:4197 "EHLO carter.pixi.com") by relay.pixi.com with ESMTP id S8725AbVCaR5A (ORCPT ); Thu, 31 Mar 2005 07:57:00 -1000 Received: from Internal (206.127.224.41) by carter.pixi.com with SMTP; Thu, 31 Mar 2005 17:56:59 GMT X-Titankey-e_id: <08ee1847-d177-4713-9f77-7ea311e62d66> Received: from yoda.pixi.com (yoda.pixi.com [206.127.224.41]) by yoda.pixi.com (8.11.6/8.11.6) with SMTP id j2VHQgQ17622 for ; Thu, 31 Mar 2005 07:26:42 -1000 Message-Id: <200503311726.j2VHQgQ17622@yoda.pixi.com> To: freebsd gnome From: knowtree@aloha.com Date: Thu, 31 Mar 2005 07:26:42 HST X-Posting-IP: 141.190.32.68 X-Mailer: Endymion MailMan Standard Edition v3.2.19 Subject: Re: end-user whines about 2.10 X-BeenThere: freebsd-gnome@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: GNOME for FreeBSD -- porting and maintaining List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 31 Mar 2005 17:57:01 -0000 > From: Randy Bush > Subject: Re: end-user whines about 2.10 I used to use ssh to do that and it worked really well. From the ssh man page: =-=-=-=-= X11 and TCP forwarding If the ForwardX11 variable is set to ``yes'' (or, see the description of the -X and -x options described later) and the user is using X11 (the DISPLAY environment variable is set), the connection to the X11 display is automatically forwarded to the remote side in such a way that any X11 programs started from the shell (or command) will go through the encrypted channel, and the connection to the real X server will be made from the local machine. The user should not manually set DISPLAY. For- warding of X11 connections can be configured on the command line or in configuration files. Take note that X11 forwarding can represent a secu- rity hazard. =-=-=-=-= I believe the security issue is that if you allow your remote system to attach to your local X display, other systems can, too. Anyone else care to comment on that? Gary Dunn knowtree@aloha.com Honolulu