Arch Linux

clank

Member

Registered: 2005-04-11

Posts: 35

X-server permissions

For some reason, I can't find anything on this:

How would I give another user, and only that user ( not using xhost +localhost), permission to run gui program(s) on my X-session?

As always, feel free to point me to a thread I may have overlooked that's already disscused this.

-Clank

---

=> Now known as jb

phrakture

Arch Overlord

From: behind you

Registered: 2003-10-29

Posts: 7,879

Website

Re: X-server permissions

"man xhost" says that "xhost +nis:username@machinename" should work... but I'm not to sure it will... why do you need to allow a single use to run apps under *your* X server?  maybe there's another way to do the same thing

---

http://phraktured.net

clank

Member

Registered: 2005-04-11

Posts: 35

Re: X-server permissions

Oops, I mispelled xhost when looking up the man page, no wonder I couldn't find anything.  I guess I have to recompile for secure RPC.

My situation is that I have a computer at work that will also have a webserver on it.  All the site files will be owned by a user in it's own group.  I wanted to use something like quanta plus or bluefish to edit the site.  But since other people, who would find it hilarious to load up some less-than-appropriate sites on my screen, have accounts for it and can ssh into it (I didn't get much say in that part).  That's why I want to give permissions to that user and that user only.  I should have mentioned I work on a college campus, to explain their sense of humour.

But any other suggestions to dealing with this would be great.

---

=> Now known as jb

clank

Member

Registered: 2005-04-11

Posts: 35

Re: X-server permissions

Okay, so I recompiled with SecureRPC support, and I don't get errors now when I add individual users to the xhost list.  But no matter what combination I try with xhost (xhost +nis:httpd@, xhost +httpd@, xhost nis:httpd@localhost, etc.) I still get "connection to ":0.0" refused by server."

I thought the X-server was supposed to be networking friendly  
I guess I'll go see if there's other options I had to enable...

---

=> Now known as jb