Permissions: xhost +

[Collins Richey]

On Tue, 27 Jan 2004 22:27:01 -0500
Matthew Carpenter <matt at eisgr.com> wrote:

> David A. Bandel wrote:
> 
> > On Sun, 25 Jan 2004 22:08:31 -0500
> > edj <ejbr at comcast.net> wrote:
> >
> > On Sunday 25 January 2004 06:54 pm, Matthew Carpenter wrote:
> > [snipped]
> >
> > >Please use "xhost localhost" as this only allows local processes
> > >access to the screen...
> >
> > "xhost +localhost" never worked for me.  It returns:
> >
> > localhost being added to access control list
> >
> > But, upon "su" to root,I always get something like:
> >
> > Xlib: connection to ":0.0" refused by server
> > Xlib: No protocol specified
> >
> > Gtk-WARNING **: cannot open display: :0
> >
> > A plain "xhost +" works, of course.  Any advice appreciated.  Thanks.
> >
> >
> > you need to set the display:  export DISPLAY=LOCALHOST:0.0
> >
> > There's a big difference between :0.0 and LOCALHOST:0.0.
> >
> > Ciao,
> >
> > David A. Bandel
> 
> 
> I never do.
> 

Not disputing your knowledge, but on my machines over several years, I only ever see the :0.0 variant, and xhost +localhost always enables root users to have access to the screen.

Example:

collins at richpc3 $ echo $DISPLAY
:0.0
collins at richpc3 $ xhost +localhost 
localhost being added to access control list
collins at richpc3 $ su -
Password: 
richpc3 root # beaver
richpc3 root # echo $DISPLAY
:0.0

beaver opens its window and runs normally.

So, what's the rest of the story?

-- 
Collins - Denver Area - 
Gentoo stable kernel 2.6.2-rc1