RE: X and port 6000

From: Crittenden J Tuttle IV (crittendeniv@attbi.com)
Date: 02/24/02 

From: "Crittenden J Tuttle IV" <crittendeniv@attbi.com>
To: "Kerberus" <kerberus@microbsd.net>, "sege" <sundiatah1@telocity.com>
Date: Sun, 24 Feb 2002 12:05:01 -0800

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Add the string

- -nolisten tcp

to the command line in '/etc/X11/xdm/Xservers' and restart X.
Having restarted X, run

netstat -lnA inet

as 'root' and you will see that port 6000 is not listed anymore.

Notice that this option is set by default in Mandrake Linux 8.2.

- -----Original Message-----
From: Kerberus [mailto:kerberus@microbsd.net]
Sent: Friday, February 22, 2002 1:01 PM
To: sege
Cc: security-basics@securityfocus.com
Subject: Re: X and port 6000

Hrmmm I thought they fixed that in X, Well at least under *BSD they
did,
what version of XFree is mandrake using these days???

On Thu, 2002-02-21 at 12:24, sege wrote:
> Hello Folks:
> I am running Mandrake Linux 8.1, and I am trying to stop X from
> listening 0n port 6000. Any hint on how to do this will be
> appreciated.
> TIA,
>
> Qv6

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQA/AwUBPHlHaRGK5JkqzEQ8EQL5rwCfXHoz/oFkHxwmdrdC097/ch6H8iUAn32W
AJ/oJ39rtCb31rr+lGURCyN7
=GVpF
-----END PGP SIGNATURE-----

Relevant Pages

  • Re: Hardening a Solaris system.
    ... > I know files that execute with root permissions by normal users (e.g. ... > I've set up a web server, running Apache, so are thinking about what I ... thing to leave enabled in here might be a backup port. ... there are security steps here. ...
    (comp.unix.solaris)
  • Re: Hardening a Solaris system.
    ... > I know files that execute with root permissions by normal users (e.g. ... > I've set up a web server, running Apache, so are thinking about what I ... thing to leave enabled in here might be a backup port. ... there are security steps here. ...
    (comp.security.unix)
  • Re: Safe practices
    ... Assume I'm logged in to my Linux system as a normal user. ... System is stand-alone, non-networked, but connected to internet via ... Someone might try to get to you through a port used for other purposes ... Your 'su root' at your console:- You are in a different thread to the rest ...
    (alt.os.linux)
  • A new model for ports and kernel security?
    ... why do we have this requirement that only root ... made to a low port to be "secure". ... clearly it has outlived its usefulness as a "security" feature. ... So I would like to propose the following improvement to kernel security ...
    (Linux-Kernel)
  • Enforce SSH Login Delay
    ... ::ffff:211.171.191.106 port 11328 ssh2 ... Dec 10 13:18:28 turf sshd: Failed password for root from ...
    (comp.os.linux.misc)