After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 101337 - garnome web site recommends people run Xnest in an insecure fashion
garnome web site recommends people run Xnest in an insecure fashion
Status: RESOLVED INVALID
Product: GARNOME
Classification: Deprecated
Component: general
unspecified
Other All
: Normal normal
: ---
Assigned To: GARNOME Maintainers
garnome list
Depends on:
Blocks:
 
 
Reported: 2002-12-16 09:45 UTC by James Henstridge
Modified: 2005-02-04 08:06 UTC
See Also:
GNOME target: ---
GNOME version: ---


Description James Henstridge 2002-12-16 09:45:38 UTC 
The GARNOME web site recommends the following to run gnome in an Xnest:
  Xnest :1 -ac -geometry 800x600 &
  export PATH=$HOME/garnome/bin:$PATH
  export LD_LIBRARY_PATH=$HOME/garnome/lib:$LD_LIBRARY_PATH
  export GDK_USE_XFT=1
  DISPLAY=:1 $HOME/garnome/bin/gnome-session &

This is equivalent of running "xhost +" on your server and leaves it
completely open to anyone who can connect (ie. all other users on the
system and depending on firewall settings, everyone on the internet).

A better set of commands is:
  export PATH=$HOME/garnome/bin:$PATH
  export LD_LIBRARY_PATH=$HOME/garnome/lib:$LD_LIBRARY_PATH
  export GDK_USE_XFT=1
  startx $HOME/garnome/bin/gnome-session -- Xnest :1 -geometry 800x600

startx will handle setting up the XAuth tokens and starting the xnest for
you, and will kill the X server when gnome-session exits.
Comment 1 Paul Drain 2004-10-15 09:23:24 UTC 
Mass re-assign
Comment 2 Paul Drain 2005-02-04 08:06:03 UTC 
Really, really old bug which hasn't existed since the re-fit of the GARNOME
pages, or even on jdub's last archived copy.

Now probably INVALID or possibly NOTABUG any longer (man, OBSELETE would be a
wonderful resolution to have, which would be perfect for this.)