X11 cookies and forwarding

Markus Friedl markus at openbsd.org
Fri Nov 16 07:54:11 EST 2001


On Thu, Nov 15, 2001 at 03:46:22PM -0500, Ed Phillips wrote:
> but I
> noticed today that with 2.9.9p2, if I use "ssh -X" to start a shell on the
> server, in that shell XAUTHORITY is set to /tmp/ssh-XXXXXXXX/cookies and
> there are cookies placed there there.  

wrong. 2.9.9 and later use $HOME, not /tmp

but what is your question?

fake cookies are generated in order to restrict 
the access to the real x11 server to the duration
of the ssh session and not to the duration of the
x11 session.

-m



More information about the openssh-unix-dev mailing list