Re: XDM Insecurity revisited

[alan () LXORGUK UKUU ORG UK (Alan Cox)]

> Digital Unix 4.0E, SuSE Linux 6.1 and Red Hat Linux 6.0 are still
> (1.5 years later) shipped with this default Xaccess file. It is somehow
> ironic that e.g. SuSE now uses tcpwrappers by default on most TCP
> services in it's distribution and describes the use of tcpwrappers in
> the manual in a special chapter about security, but fails to close (or
> even mention) that way to circumvent login restrictions.

Even more fun, just open 1024 xdcmp sessions with a remote xdm on a low
spec box. Xdm doesnt like this. Gdm at least does damage limitation in
this case.

On the Red Hat side, for a standard Red Hat 6 using gdm not xdm, edit
/etc/X11/gdm.conf and set it to

[xdcmp]
Enable=0

and life is happier.