What risk is X11Forward to a server?

Jim Knoble jmknoble at pobox.com
Fri Oct 26 06:05:05 EST 2001


Circa 2001-Oct-25 14:23:57 -0500 dixit Dave Dykstra:

: Why, then, doesn't OpenSSH set X11Forward=yes by default on the server?

Don't know.  However, i do know that, on servers without xauth present,
sshd emits a nasty warning message when X11 forwarding is turned on but
sshd can't find xauth.  That may be why Markus or someone else decided
to turn it off by default.

-- 
jim knoble | jmknoble at pobox.com   | http://www.pobox.com/~jmknoble/
(GnuPG fingerprint: 31C4:8AAC:F24E:A70C:4000::BBF4:289F:EAA8:1381:1491)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 262 bytes
Desc: not available
Url : http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20011025/a04d9948/attachment.bin 


More information about the openssh-unix-dev mailing list