#106 closed defect (fixed)
Xvfb binds to a TCP port by default
Reported by: | bugmenot | Owned by: | Antoine Martin |
---|---|---|---|
Priority: | minor | Milestone: | 0.2 |
Component: | server | Version: | 0.1.0 |
Keywords: | xvfb server security default | Cc: |
Description (last modified by )
Xvfb binds to a TCP port on 0.0.0.0
, which is not optimal from a security/sysadmin point of view.
It's easily fixable using --xvfb
, but it would be awesome to have "-nolisten tcp" added to the default arguments to Xvfb.
Thanks!
Change History (2)
comment:1 Changed 10 years ago by
Description: | modified (diff) |
---|---|
Milestone: | current → 0.2 |
Resolution: | → fixed |
Status: | new → closed |
comment:2 Changed 17 months ago by
this ticket has been moved to: https://github.com/Xpra-org/xpra/issues/106
Note: See
TracTickets for help on using
tickets.
Just tested this option on:
And all worked as expected, so committed this in r707, added it to the milestone 0.2 page to make sure this gets tested again before release.
Here is a sample command line (as seen with ps) it generated: