FS#43282 - [xorg-xdm] XDM starts X server listening on port 6000

Attached to Project: Arch Linux
Opened by Omar Sandoval (osandov) - Wednesday, 31 December 2014, 20:45 GMT
Last edited by Andreas Radke (AndyRTR) - Thursday, 28 July 2016, 10:19 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To Jan de Groot (JGC)
Andreas Radke (AndyRTR)
Architecture All
Severity High
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:
The default configuration shipped with XDM doesn't pass the -nolisten tcp flag to the X server. This is inconsistent with the default xserverrc in xorg-xinit and insecure in general.

Steps to reproduce:
* Start XDM
* Run ss -lt and observe that the machine is listening on port 6000

Fix:
I've attached a patch that I believe should fix this issue.
   Xservers-nolisten.patch (0.3 KiB)
This task depends upon

Closed by  Andreas Radke (AndyRTR)
Thursday, 28 July 2016, 10:19 GMT
Reason for closing:  Won't fix
Comment by Andreas Radke (AndyRTR) - Monday, 09 November 2015, 13:42 GMT
I assume this would change upstream intention as described in man xdm - search for "LISTEN".

And I haven't seen any other distro still disabling the listening. You can find many very old google results showing this has been removed in from the distros in early 2000's.

Loading...