OpenBSD Journal

[Ask OBSDJ] How to secure XFree86?

Contributed by Dengue on from the legion-of-anonymous-cowards dept.

An Anonymous Coward writes : "OpenBSD has extensive security features available that allow the system administrator to prevent users from over-using system resources. The only problem with them, is that it doesn't apply to XFree86 logins. Something as simple as a 'while' script can bring the system nearly to a halt... So, can anyone make some suggestions on how to secure an X session?"

(Comments are closed)

Comments

  1. By sloppyjoe () on

    touch ~/.xserverrc
    echo X -nolisten tcp :0 >> ~/.xserverrc


    don't know if thats what your lookin for

    Comments

    1. By Morten Liebach () morten@hotpost.dk on https://pc89225.stofanet.dk

      Yo!

      I usually append -nolisten tcp to the last line in /etc/X11/xdm/Xservers , accomplishes the same thing.

      I also set xdm_flags in /etc/rc.conf to "-udpPort 0" , that way xdm(1) isn't listening to the network.

      But ... where's the ~/.xserverrc file documented? I just tried searching the manpages, apropos gave nothing, and a search through X(7) and Xserver(1) fournd nothing.

      BTW: I believe the OP wants to know about resource limits and how to keep local logins from eating all resources, and not about keeping X closed to the network. Alas, I don't know much about the first thing!

      Have a nice day!

      Comments

      1. By knomevol () on

        thanks for the tip!

      2. By Anonymous Coward () on

        The ~/.xserverrc is, well mentioned rather than documented in the manpages for xinit and startx.

    2. By bubba joe bob () on

      Has anyone looked at the Xwrapper in fbsd, i don't know if anyone else uses this. Just wondering what its doing. I'm assuming just a few sanity checks, but could someone else look at it?

Latest Articles

Credits

Copyright © - Daniel Hartmeier. All rights reserved. Articles and comments are copyright their respective authors, submission implies license to publish on this web site. Contents of the archive prior to as well as images and HTML templates were copied from the fabulous original deadly.org with Jose's and Jim's kind permission. This journal runs as CGI with httpd(8) on OpenBSD, the source code is BSD licensed. undeadly \Un*dead"ly\, a. Not subject to death; immortal. [Obs.]