From owner-freebsd-stable@freebsd.org Wed Mar 2 20:59:58 2016 Return-Path: Delivered-To: freebsd-stable@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 5AE9AAC1F65 for ; Wed, 2 Mar 2016 20:59:58 +0000 (UTC) (envelope-from allbery.b@gmail.com) Received: from mail-vk0-x22f.google.com (mail-vk0-x22f.google.com [IPv6:2607:f8b0:400c:c05::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 16FA719E8 for ; Wed, 2 Mar 2016 20:59:58 +0000 (UTC) (envelope-from allbery.b@gmail.com) Received: by mail-vk0-x22f.google.com with SMTP id k196so1504867vka.0 for ; Wed, 02 Mar 2016 12:59:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc; bh=R6BWqfeOW1vhLki6q1IEGnmmsjl2Rayil5Ma66x5JRk=; b=Et5YOuhNKgchpGrgd8bhRyMZRG6bdRZwSkm8yt95/t9fH1h8CGDZHQB+xZqXSvuIWJ tsJGzUMk5/45v5ufxVrlltv9JDBUHv13qOA8XXhJYW1pv7zXuCj3j9GL3T35NevtwOUe KaRsflYuun4lSn0fIfmhT/DcUN30GD00at1jECVU3Uu4pF3kwPDHmLHhxk7YU9aV4Se1 nKzBlYjimy9hTwF+cVNkbxPfZH4wgAFukk5zPXaZmKZjuHFodh6OTnIBeKwZStAGY6nw oAWmFSIwQq0k4IhUCW19VVhGWGN2DGUxV+sD5CdOOVbLoQ4FZAP4GvrmrceyWLs3OP6Q 9ABw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc; bh=R6BWqfeOW1vhLki6q1IEGnmmsjl2Rayil5Ma66x5JRk=; b=eTrlz4gA+k5v6Vq6/nQy1tVj6QdS9o7iEITjyDOJZesxy9H/hkY7sl4Oims3rdlSiO prvftqRBL4nV812wG3MHEBn2iUBgGUsPBvzSBW/mSi96mmI9xn1R9lExgjrmsXgp1O8D Mr/Tkb1K72xSPchucsSPcO3BkNMk0jU6OvM1kDP8bFNpHmNmVFzmviITMuKIb+/Xs07U mjvWyVPej8WHsfqPPwa0jycx/ubV6T2882msTv11/pmaR4cn9A8tT45VCvoXOEMv4mbL ASN6gAafj0WQQbf71rOWZHFhlpXZUo22qsy7Wqxz0E5fmC7A2YICxqq+dxi2vskQ13rb nkoA== X-Gm-Message-State: AD7BkJIATob5iz5IFL8ebkb7MySX5dqqinz637hhx0MSHa3pElFb1dK9Wvamj+BrxPXKpodq1loLjb+Ajg+7mQ== MIME-Version: 1.0 X-Received: by 10.31.54.139 with SMTP id d133mr22031324vka.132.1456952397126; Wed, 02 Mar 2016 12:59:57 -0800 (PST) Received: by 10.176.3.44 with HTTP; Wed, 2 Mar 2016 12:59:57 -0800 (PST) In-Reply-To: <38daa5ebf8d9d06b5595ff8da54cc18c@ultimatedns.net> References: <38daa5ebf8d9d06b5595ff8da54cc18c@ultimatedns.net> Date: Wed, 2 Mar 2016 15:59:57 -0500 Message-ID: Subject: Re: Why must X open TCP by default? From: Brandon Allbery To: Chris H Cc: freebsd-stable Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.20 X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Mar 2016 20:59:58 -0000 On Wed, Mar 2, 2016 at 3:56 PM, Chris H wrote: > Good catch, by both you, and Brandon. I just tried it. But > sockstat(1) still reports 6000 being open. Closing the X > server, and session, reveal that 6000 is no longer open. > Bummer. > Check `man 7 Xserver` to verify the option needed. You might also have to check the xserverrc file (I don't recall where it is offhand and can't really check right now, but startx is a shell script and the default xserverrc will be set near the top) to see if it is overriding the option. In that case you could copy the xserverrc to ~/.xserverrc (make sure it's chmod +x) and edit that copy to force nolisten tcp, or for multiple users you'd edit the master xserverrc but may need to remember to re-edit after system updates. -- brandon s allbery kf8nh sine nomine associates allbery.b@gmail.com ballbery@sinenomine.net unix, openafs, kerberos, infrastructure, xmonad http://sinenomine.net