l i n u x - u s e r s - g r o u p - o f - d a v i s
L U G O D
 
Next Meeting:
January 6: Social gathering
Next Installfest:
TBD
Latest News:
Nov. 18: Club officer elections
Page last updated:
2009 Apr 09 01:02

The following is an archive of a post made to our 'vox-tech mailing list' by one of its subscribers.

Report this post as spam:

(Enter your email address)
Re: [vox-tech] Fwd: Trouble installing Matlab in Debian
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [vox-tech] Fwd: Trouble installing Matlab in Debian



Alex Mandel wrote:
> As far as I can tell xhost+ only lasts for that x-session and can easily

Sure, but it lasts till logout which for many can be weeks, and even a minute
is WAY too long.  Might as well set your root password to "password".  Say you
open another window and type the user or root password.

> be reactivated with xhost-

There is no sane reason to ever do xhost +.  Keystrokes could be sniffed, or
injected.  One might well inject something so quickly that within 1/10 th of a
second they have added a backdoor to your machine and then cleared the screen.
Although it is great fun when a newbie admin does it and you can torture him
with various games/tricks, change his background to something embarassing,
make his cursor unpredictable, xroaches, etc.

> And it is listed in your reference xhost+root, specifying the user never
> worked for me, hence the blanket for all users.

xhost is for hostnames not usernames, so if you must (and you don't) use
xhost +localhost.  Which while bad, is 100x better than xhost +.

> It also appears to be the preferred and most common solution for using
> the oracle installer as it's quick and simple.

Many stupid practices are common, don't assume just because google has a bunch
of hits for something that it's a good idea.  I'd never recommend it to
someone that might not understand the full security implications of doing so.

> Ah yes export DISPLAY=:0.0 is also part of the solution but no most of
> the stuff on the page you reference did not work in my case.

On most machines your DISPLAY will survive a su or a sudo (I just checked on
my desktop), I'd suggest echo $DISPLAY before and after su/sudo to help
troubleshoot.  If remote a echo $DISPLAY before and after a ssh.

> Thanks for the reference of ideas,
> Alex
> _______________________________________________
> vox-tech mailing list
> vox-tech@lists.lugod.org
> http://lists.lugod.org/mailman/listinfo/vox-tech
_______________________________________________
vox-tech mailing list
vox-tech@lists.lugod.org
http://lists.lugod.org/mailman/listinfo/vox-tech



LinkedIn
LUGOD Group on LinkedIn
Sign up for LUGOD event announcements
Your email address:
facebook
LUGOD Group on Facebook
'Like' LUGOD on Facebook:

Hosting provided by:
Sunset Systems
Sunset Systems offers preconfigured Linux systems, remote system administration and custom software development.

LUGOD: Linux Users' Group of Davis
PO Box 2082, Davis, CA 95617
Contact Us

LUGOD is a 501(c)7 non-profit organization
based in Davis, California
and serving the Sacramento area.
"Linux" is a trademark of Linus Torvalds.

Sponsored in part by:
Sunset Systems
Who graciously hosts our website & mailing lists!