[Re: Xwin32]

[Paul_Melson@keykertusa.com]

>I think they shut it off by default when they moved to xinet.d.  (RH
>7.x)  You probably will want to restrict access to prevent some of the
>buffer overflow stuff that was going on if you can.

FWIW, they're RedHat 7.0, Mandrake 7.2, and Slackware 7.0 releases, 
respectively.  Both RedHat and Mandrake are running xinetd, though the 
Slackware box is still running the old inetd.  But I don't know what 
xinetd/inetd would have to do with it as gdm is launched from 
/etc/X11/Xsession (except the Slackware box where it  launches from 
rc.local).  Anyway, these machines are on small internal nets acting as 
proxies to other internal nets where security isn't as much of an issue as 
if it were on a public network somewhere.

As an aside, though, I've started using Mandrake's `msec` tool to start 
hardening systems that do sit on public networks.  It's nothing you 
couldn't do with RedHat before, but it makes it a whole lot easier to lock 
down a machine.  I've been a Slackware loyalist since the 1.2.x kernels 
were current, but I'm starting to like Mandrake more and more. 

PaulM