Le 22/09/2017 à 01:32, Arnt Karlsen a écrit :
>> The '-Y' option enables X11 forwarding. (This of course requires
>> sshd.)
>>
>> You can probably justify 'xhost +' if this is one of those
>> I'm-the-only-user machines. Thank Ghu, remote network access to the X
>> server is no longer enabled by default on Linux hosts. (The right way
>> to do remote X11, IMO, is via 'ssh -Yuser@???', thereby
>> forwarding X11 across the authenticated ssh tunnel.)
>>
>> One can argue that you should use 'ssh -Y' even locally so you get out
>> of the habit of using 'xhost +'. I won't argue that, but will just
>> put it out there.
> ..my prefecence was the -X option: ssh -X root@localhost
> until Debian killed it with some new policy.

     AFAIR, ssh -Y is used for backward compatibility with old software 
(like libroot), but, normally, -X is enough.

     I don't know how one can prevent you from running ssh -X 
root@localhost . Permission to do so is set/unset in /etc/ssh/sshd_config .

     But gksu or gksudo do not require ssh at all.

         Didier