[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Xsession problems



On Mon, 29 Oct 2001, Orna Agmon wrote:

> is your display defined correctly?

Yes. Look at the error message. The client was rejected from display :0.0

> (setenv DISPLAY <the number you get when you write echo $DISPLAY when it
> IS defined right>)
> the display is usually set in the .cshrc or similar files.
> consider xhost + to allow for other users to use your display.
> run xhost + when you are yourself, then you allow everyone to display on
> your station's display.

However, this allows _everybody_ to connect to your display. From there
they can do nice things like sniff what you type to your terminal, and
even inject characters to your root session

Try:

alias xsu- 'su -c "env DISPLAY=$DISPLAY XAUTHORITY=$XAUTHORITY \$SHELL" -'

(Could be trimmed down a bit. I've tried to make it as shell-independent
as possible)

This starts a root shell that preserves that values of XAUTHORITY and
DISPLAY . Since root can read the user's files, it can also read
Xauthority (or whereever the Xauthority file is. It may be in a different
location under some circumstances.

'xhost +' is bad for your health. If you have no other local users you may
consider using 'xhost +localhost' to allow only local clients to view the
display.

>
> orna.
>
> On Sun, 28 Oct 2001, Shai Bentin wrote:
>
> > I have two problems, one is related to Xsession (I think). For some
> > reason I can't run GUI applications under a different user than the one
> > I'm logged into. I.e if I'm in an Xsession for "shai" and " su  -" to
> > root trying to run an X application results as:
> >
> > Xlib: connection to ":0.0" refused by server
> > Xlib: Client is not authorized to connect to Server
> >
> > I must stress that this worked before.

Maybe 'xhost +something' was in effect?

> >
> > My other problem is for Ximian Evolution Users (if there are any in the
> > group). When I try launching the application I get "can't find
> > configuration database". Does anybody know what can be done?

Sorry. No idea

-- 
Tzafrir Cohen
mailto:tzafrir@technion.ac.il
http://www.technion.ac.il/~tzafrir



=================================================================
To unsubscribe, send mail to linux-il-request@linux.org.il with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail linux-il-request@linux.org.il