[11401] in bugtraq
Re: Mandrake 6.0 .Xauthority
daemon@ATHENA.MIT.EDU (Chmouel Boudjnah)
Wed Aug 18 01:16:32 1999
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Message-Id:  <87g11j7141.fsf@vador.mandrakesoft.com>
Date:         Tue, 17 Aug 1999 01:32:46 +0200
Reply-To: Chmouel Boudjnah <chmouel@MANDRAKESOFT.COM>
From: Chmouel Boudjnah <chmouel@MANDRAKESOFT.COM>
X-To:         Elmer Joandi <elmer@YLENURME.EE>
To: BUGTRAQ@SECURITYFOCUS.COM
In-Reply-To:  Elmer Joandi's message of "Sun, 15 Aug 1999 12:01:32 +0300"
Elmer Joandi <elmer@YLENURME.EE> writes:
> Looks like Mandrake 6.0 wont create .Xauthority
I have already answer directly to you, why you just see the code from
/usr/X11R6/bin/startx is completely based on the RedHat version :
# set up default Xauth info for this machine
mcookie=`mcookie`
serverargs="$serverargs -auth $HOME/.Xauthority"
xauth add $display . $mcookie
xauth add `hostname -f`$display . $mcookie
xinit $clientargs -- $serverargs
> Dont know where and how RedHat does it but there it is.
Humm :
(test@vador)[~]-% rm -f ~/.Xauthority
(test@vador)[~]-% startx -- :1
xauth:  creating new authority file /home/test/.Xauthority
[...]
^C
(test@vador)[~]-% ls -l ~/.Xauthority
-rw-------   1 test     test          116 Aug 17 01:27 /home/test/.Xauthority
but maybe we talk about something different
> Now just installed Mandrake and assumed it to be RH60 clone
> and found after some time that there is just plain
> host authentication and that is quite wide-open.
>
> I solved the problem with
>
> echo remove $DISPLAY | xauth ;
> echo generate $DISPLAY | xauth ;
> in  /etc/X11/xinit/xinitrc
> which is probably incorrect in detail.
do you launch you X server by xinit or by startx. On a mandrake the
preferred way to launch your X server is to use startx (or boot via
runlevel=5).
--
Chmouel