Bug 273927

Summary:	x11-apps/xdm-1.1.6: X server should not listen by default on 0.0.0.0:6000
Product:	Gentoo Security	Reporter:	Martin Mokrejš <mmokrejs>
Component:	Auditing	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	normal	CC:	x11
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Martin Mokrejš 2009-06-12 21:55:38 UTC

Hi,
  I found that by default my box is listening on port 6000 on all network interfaces:

# netstat -l -v -e -p -n
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       User       Inode      PID/Program name   
tcp        0      0 0.0.0.0:6000            0.0.0.0:*               LISTEN      0          30523842   19132/X 

I think it should be disabled or even better configurable in /etc/conf.d/xdm . At the moment I have disabled that in /etc/X11/xdm/Xservers by adding "-nolisten tcp" on the line defining local display :0.

Comment 1 Stefan Behte (RETIRED) gentoo-dev

2009-06-25 10:41:51 UTC

One might want to have a look at:
http://bugs.gentoo.org/show_bug.cgi?id=171853

Jakub suggested to use ~/.xserverrc to change the listening behaviour. In my opinion the default should be -nolisten tcp.

@x11: any opinions on this?

Comment 2 Rémi Cardona (RETIRED) gentoo-dev

2009-06-25 12:34:55 UTC

discussion is already going on in the duped bug

Thanks

*** This bug has been marked as a duplicate of bug 193044 ***