From owner-freebsd-questions@freebsd.org Sat May 2 15:05:13 2020 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 6B7082D201B for ; Sat, 2 May 2020 15:05:13 +0000 (UTC) (envelope-from freebsd@gregv.net) Received: from aurora.gregv.net (aurora.gregv.net [192.111.144.138]) by mx1.freebsd.org (Postfix) with ESMTP id 49DsqV3nXRz4J0R for ; Sat, 2 May 2020 15:05:10 +0000 (UTC) (envelope-from freebsd@gregv.net) Received: by aurora.gregv.net (Postfix, from userid 1001) id 9FB0A721; Sat, 2 May 2020 11:05:09 -0400 (EDT) Date: Sat, 2 May 2020 11:05:09 -0400 From: Greg Veldman To: Christoph Kukulies Cc: freebsd-questions@freebsd.org Subject: Re: X11Forwarding yes ssh -X vs. ssh -Y Message-ID: <20200502150509.GH1068@aurora.gregv.net> References: <20200502132905.GG1068@aurora.gregv.net> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.12.1 (2019-06-15) X-Rspamd-Queue-Id: 49DsqV3nXRz4J0R X-Spamd-Bar: +++ Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=none (mx1.freebsd.org: domain of freebsd@gregv.net has no SPF policy when checking 192.111.144.138) smtp.mailfrom=freebsd@gregv.net X-Spamd-Result: default: False [3.60 / 15.00]; ARC_NA(0.00)[]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[gregv.net]; AUTH_NA(1.00)[]; NEURAL_SPAM_MEDIUM(0.64)[0.640,0]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCPT_COUNT_TWO(0.00)[2]; NEURAL_SPAM_LONG(0.98)[0.977,0]; R_SPF_NA(0.00)[]; RCVD_COUNT_ZERO(0.00)[0]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:31863, ipnet:192.111.144.0/20, country:US]; IP_SCORE(1.09)[ipnet: 192.111.144.0/20(1.87), asn: 31863(3.61), country: US(-0.05)] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 02 May 2020 15:05:13 -0000 On Sat, May 02, 2020 at 03:42:24PM +0200, Christoph Kukulies wrote: > OK, here is (doesn???t seem to have anything related to security extensions): Indeed, it appears that way (see below). > name of display: /private/tmp/com.apple.launchd.NM3gWpA6AH/org.macports:0 This is an interesting line. Are you by chance doing this on a MacOS system? If so I believe MacOS does not support the X11 SECURITY extension at all, so your only option is to use trusted forwarding (the -Y flag). At least it didn't as of the last time I looked, which was around Sierra/High Sierra. Not sure what the current state is. > number of extensions: 21 > Apple-DRI (opcode: 128, base event: 64, base error: 128) > Apple-WM (opcode: 129, base event: 68, base error: 130) > BIG-REQUESTS (opcode: 134) > DAMAGE (opcode: 142, base event: 97, base error: 154) > DOUBLE-BUFFER (opcode: 144, base error: 155) > GLX (opcode: 148, base event: 101, base error: 159) > Generic Event Extension (opcode: 130) > MIT-SCREEN-SAVER (opcode: 143, base event: 98) > MIT-SHM (opcode: 132, base event: 72, base error: 132) > Present (opcode: 145) > RANDR (opcode: 141, base event: 95, base error: 149) > RENDER (opcode: 140, base error: 144) > SHAPE (opcode: 131, base event: 71) > SYNC (opcode: 135, base event: 90, base error: 138) > X-Resource (opcode: 146) > XC-MISC (opcode: 137) > XFIXES (opcode: 139, base event: 93, base error: 142) > XINERAMA (opcode: 138) > XInputExtension (opcode: 133, base event: 73, base error: 133) > XKEYBOARD (opcode: 136, base event: 92, base error: 141) > XVideo (opcode: 147, base event: 99, base error: 156) This is where it would be. You'd be looking for a line similar to the following (from my FreeBSD 11.3 desktop): SECURITY (opcode: 137, base event: 86, base error: 138) -- Greg Veldman freebsd@gregv.net