If you aren't in a position to check that (you have but your one laptop running X11, say), you can ssh from the server to itself using a fake session: Are you able to ssh -X from any other host successfully? Does ssh -Y work while ssh -X doesn't? In either case, assume ssh + X11 is set up correctly on your server and move on to the next section.
That bit me several times before I read enough docs to understand what was happening.įirst, you should rule out any server-side problems. New attempts to open windows will just fail after that. It's also important to note that "untrusted" X11 forwarding turns off after a certain amount of time to keep you from accidentally leaving it on. Do you need to be able to rotate your X display from the remote host? This is probably why RandR is disabled with -X. "Untrusted" is the one that makes it (somewhat) safer to deal with an untrusted remote host.Īn "Untrusted" connection attempts to limit what a black hat could do to you by engaging the X11 security extension and disabling other extensions that you (hopefully) don't need. But actually it's an option you're supposed to use in situations where the connection IS trustworthy and you want to run stuff without extra security measures getting in your way. I thought "Trusted" connections were safer. This terminology actually confused me for years.
"Trusted" means you are entirely confident that no on on the remote host will get access to your Xauth data and use it to monitor your keystrokes for instance. SSH will use additional security measures to try to make X11 forwarding safer. "Untrusted" in this context means you don't trust the connection.
0 kommentar(er)
