FS#59017 - [xorg-xdm] Configuration makes X11 network accessible

Attached to Project: Arch Linux
Opened by nicolasb (nicolasb) - Friday, 15 June 2018, 07:02 GMT
Last edited by Jan de Groot (JGC) - Monday, 18 June 2018, 14:40 GMT
Task Type General Gripe
Category Upstream Bugs
Status Closed
Assigned To Jan de Groot (JGC)
Andreas Radke (AndyRTR)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:


Additional info:
* version: extra/xorg-xdm 1.1.11-7
* misconfiguration in /etc/X11/xdm/Xservers


Steps to reproduce:
/etc/X11/xdm/Xservers default configuration file contains:

:0 local /usr/bin/X :0

causing X11 to listen on all network interfaces on port TCP/6000
Regarding defense in depth principle, it should not listen on the network and configuration file should be:

:0 local /usr/bin/X :0 -nolisten tcp
This task depends upon

Closed by  Jan de Groot (JGC)
Monday, 18 June 2018, 14:40 GMT
Reason for closing:  Fixed
Additional comments about closing:  xorg-xdm-1.1.11+50+gb685338-1

Loading...