SSH && X11 && JAIL-Environment

[Marc Schoechlin]

Hi !

I would like to use X11_Forwarding with my Jail-System.

I activated X11-Forwarding and restarted my SSHD.

Trying to start "xclock" provides me the following result:
--
ms at nox:~$ xclock
X11 connection rejected because of wrong authentication.
X connection to localhost:10.0 broken (explicit kill or server shutdown).
--

A workaround for this is possible with that:
--
Client    : ssh <jail> -R 6000:127.0.0.1:6000
Jail-Host : export DISPLAY=<jail>:0.0
Client    : xhost +127.0.0.1
Jail-Host : xclock
--

How unsecure is this ?

This is maybe pretty unsecure - are there better alternatives ?
(Maybe also more comfortable solutions ?)

Best regards

Marc Schoechlin
-- 

Gruss / Best regards  |  LF.net GmbH        |  fon +49 711 90074-413
Marc Schoechlin       |  Ruppmannstr. 27    |  fax +49 711 90074-33
ms at LF.net             |  D-70565 Stuttgart  |  http://www.lf.net