[11181] in Athena Bugs

home help back first fref pref prev next nref lref last post

Problem with config_console on RS/6000

daemon@ATHENA.MIT.EDU (probe@MIT.EDU)
Sat Oct 9 16:52:34 1993

From: probe@MIT.EDU
Date: Sat, 9 Oct 1993 16:52:18 -0400
To: Teddymar@MIT.EDU, bugs@MIT.EDU
Cc: 


I added the following note to bug 628, and have transferred it to you.
If you agree, can you either implement it, or let me know if I should do
it and have you audit it, or if you think something else should be done.
(I believe that /bin/sh is cleaning up the file descriptors on the RISC/6000.)

-Richard


Note:  probe    Sat Oct  9 16:44:04 1993
I think the proper solution to this would be to avoid the kludge that we have
and simply do an XOpenDisplay() in dm.  On some platforms, where we think that
makes "dm" sufficiently large to be a concern, we can use the old-style
method of opening the connection.

However, the other reason why I want to see the call to XOpenDisplay() is so
that we can introduce some security; we can then have dm generate a magic
cookie, and start the X server in auth-mode, such that only clients with the
magic cookie can connect to the server.  This will avoid the network security
problems that currently exist with X and will not interfere with current
behavior.  "xhost" will still work, as that will also enable the ability for
other hosts to connect to the server, but by default, there won't be any hosts
that have access (they must use the magic cookie).

Since I think this change belongs in "dm", I will pass this bug to someone
else for review.

home help back first fref pref prev next nref lref last post