Bugtraq mailing list archives

Re: Xwindows security?


From: proff () suburbia apana org au (Julian Assange)
Date: Sat, 14 Jan 1995 15:26:26 +1100 (EST)



From: Jon Peatfield <J.S.Peatfield () amtp cam ac uk>
[...]
I'd like to add a new authentication mechanism to X which uses Ident (TAP, 
RFC-931 etc), to check that a user is permitted.  e.g. a server is given a 
list of allowed user/machine pairs by a program like xhost:
[which it checks using ident for incoming connections...]

This pretty much reduces down to the same problem that xhost has.  I have
several program that will fake my ident ID to be whatever I want it to be.

Why bother? I hear there is this real hot cracker program called "su".

Proff



Current thread: