making X secure?

[Patrick Hess]

On 29.08.2016 14:10, Arto Pekkanen wrote:
> Need good documentation on how to make X11-application run inside a jail with a local X11 server. Afaik there's no comprehensive guide for this setup.

There's really not much to it. Just use X11 forwarding over SSH to run
your application inside the jail and have it displayed by the host's
X server (e.g., ssh -XY user at jail /usr/local/bin/someapp).

The only jail-related issue that I can think of this late at night
is that there's no "localhost" inside a jail. Hence, you'll have to
set "X11UseLocalhost" to "no" in the jail's /etc/ssh/sshd_config.
That should do the trick.

If you still can't get it to work, let me now and I'll write down
some more in-depth instructions tomorrow.

Patrick

-- 
If you'd like to send me a private message, make sure to remove
the "_lists" part from my address.