[FreeNX-kNX] access freenx server from a lts terminal

Philippe Bourdeu d'Aguerre bda at aime-toulouse.fr
Wed Jun 1 06:29:04 UTC 2005


Le Mardi 31 Mai 2005 16:14, Cardon Denis a écrit :
> Hi Chris,
> 
> X protocol is a network protocol. When you display an application on
> your X server (which is in your case your thin client), you first have
> to authorize that specific application to display on your screen.
> Otherwise, a malicious phisher could send you a firefox from his
> computer on which he monitors all keystrokes. 
> 
> xhost + command authorizes any host to send applications on your X
> display... so it is a security hazard.
> 
> I had already noticed that nxclient issue, but I still did get the time
> to find the reason why it doesn't use the correct X credentials.
> 
> I don't think it is a very hard bug to correct, so NX gurus on this
> could probably find the solution quite fast. (to show up that bug, you
> just have to export the display of the nxclient on another unix station
> and launch a nx session. setting up a full blow ltsp is hopefully not
> necessary :-) 
> 
Thank you Denis. I understand now why I can't get NX client working on my 
Solaris server ! I will restart my tests with NX.
-- 
Philippe BOURDEU d'AGUERRE



More information about the FreeNX-kNX mailing list