From owner-freebsd-stable Fri Feb 16 15:33: 3 2001 Delivered-To: freebsd-stable@freebsd.org Received: from ece.cmu.edu (ECE.CMU.EDU [128.2.236.200]) by hub.freebsd.org (Postfix) with ESMTP id 35C6437B401 for ; Fri, 16 Feb 2001 15:32:58 -0800 (PST) Received: from pyanfar.ece.cmu.edu (cx888b@PYANFAR.REM.CMU.EDU [128.2.87.225]) by ece.cmu.edu (8.11.0/8.10.2) with ESMTP id f1GNVx915150; Fri, 16 Feb 2001 18:32:00 -0500 (EST) Date: Fri, 16 Feb 2001 18:31:59 -0500 From: "Brandon S. Allbery KF8NH" To: Kris Kennaway , Stephen Montgomery-Smith Cc: Randy Bush , FreeBSD Stable Subject: Re: openssh not setting DISPLAY Message-ID: <33610000.982366319@pyanfar.ece.cmu.edu> In-Reply-To: <20010216152317.A97818@mollari.cthul.hu> X-Mailer: Mulberry/2.0.6 (Linux/x86) MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Friday, February 16, 2001 15:23:17 -0800, Kris Kennaway = wrote: +----- | It's not the default because it allows the remote system to snoop your | X display, and that's not something you might want so we default to | being secure. +--->8 That's interesting, since the sshd manpage from openssh says: Note that disabling X11 forwarding does not improve secu=AD rity in any way, as users can always install their own for=AD warders. -- = brandon s. allbery [os/2][linux][solaris][japh] allbery@kf8nh.apk.net system administrator [WAY too many hats] allbery@ece.cmu.edu electrical and computer engineering KF8NH carnegie mellon university ["better check the oblivious first" -ke6sls] To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message