[Ltsp-discuss] Disable X TCP Listener on LTSP Client

[Short, Kermit]

Greetings! Every time I boot up a client off of my LTSP server, I get a network port scan notice from our network security team indicating that I've got an X Server Listening on my client. Does anyone know how to do the tcp -nolisten trick (or equivalent) in the ltsp client's file system so I can prevent it from opening a listening port from the X Server?

Thanks!

--
Kermit Short



------------------------------------------------------------------------------
Dive into the World of Parallel Programming The Go Parallel Website, sponsored
by Intel and developed in partnership with Slashdot Media, is your hub for all
things parallel software development, from weekly thought leadership blogs to
news, videos, case studies, tutorials and more. Take a look and join the
conversation now. http://goparallel.sourceforge.net/
_____________________________________________________________________
Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto:
https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help, try #ltsp channel on irc.freenode.net

[Vagrant Cascadian]

Post by Short, Kermit
Greetings! Every time I boot up a client off of my LTSP server, I get
a network port scan notice from our network security team indicating
that I've got an X Server Listening on my client. Does anyone know
how to do the tcp -nolisten trick (or equivalent) in the ltsp client's
file system so I can prevent it from opening a listening port from the
X Server?

You'll need to use LDM version 2.2.15+, but you'll also need to have
LDM_DIRECTX disabled (e.g. =false or unset). LDM_DIRECTX uses the port
to connect to the X server remotely to display.


A workaround for older versions of LDM would be to set X_ARGS in
lts.conf:

X_ARGS=-nolisten tcp


I had originally proposed naming LDM_DIRECTX something like
LDM_INSECURE. :)


live well,
vagrant