]>
Tw33Ty's blog
http://www.eglug.org/blog/4
enSecurity Tip
http://www.eglug.org/node/60
<p class="left2right">
Tip of the week
</p>
<p class="left2right">
StartX by default listens on port 6000, to see this you can type at a terminal:
</p>
<p class="left2right">
netstat -an
</p>
<p class="left2right">
This is not considered secure, or good linux practice to leave it listening for connections, since this can be exploited and leave you vulnerable. To close the connection, and make X a more secure place change to the directory where startx is at:
</p>
<p class="left2right">
cd /usr/X11R6/bin/
</p>
<p class="left2right">
With your editor open startx, and look for the following line:
</p>
<p class="left2right">
serverargs=" "
</p>
<p class="left2right">
Change the line now to reflect this:
</p>
<p class="left2right">
serverargs="-nolisten tcp"
</p>
<p class="left2right">
Be sure you don't forget to add the dash ---> - in front of 'nolisten tcp' Now save and close startx, log off Xwindows your desktop, and log back in, then run 'netstat -an' and you will now see that 6000 has been closed and is not there anymore
</p>
Thu, 3 Jun 2004 16:36:28 +0000