PDA

View Full Version : Disable X from listening on port 6000



hellinterface
08-26-2005, 11:46 AM
I'm trying to create a locked down Knoppix build, so I don't want X listening for connections.

I've tried editing /usr/X11R6/bin/startx, by adding


defaultserverargs="-nolisten tcp"

and followed this tutorial

http://www.oneeyedcrow.net/tech/securex.html except the IPTABLES bit, as I'd rather ensure that this was disabled at the source.

but it doesn't seem to have made any difference. I'm guessing these defaults are being over-ridden (by a start-up script??) somewhere else, but where?

Any ideas?

hellinterface
08-29-2005, 04:42 PM
No Matter, I figured it out:

I found the problem, Knoppix uses a custom script to start X:

I had to edit

/etc/init.d/xsession

and add the line
XOPTIONS="-nolisten tcp"