On Fri, 22 Sep 2017 12:10:37 +0200, Didier wrote in message
<9a258483-ff65-96a3-1ded-5bb121586451@???>:

> Le 22/09/2017 à 01:32, Arnt Karlsen a écrit :
> >> The '-Y' option enables X11 forwarding. (This of course requires
> >> sshd.)
> >>
> >> You can probably justify 'xhost +' if this is one of those
> >> I'm-the-only-user machines. Thank Ghu, remote network access to
> >> the X server is no longer enabled by default on Linux hosts. (The
> >> right way to do remote X11, IMO, is via 'ssh -Yuser@???',
> >> thereby forwarding X11 across the authenticated ssh tunnel.)
> >>
> >> One can argue that you should use 'ssh -Y' even locally so you get
> >> out of the habit of using 'xhost +'. I won't argue that, but will
> >> just put it out there.
> > ..my prefecence was the -X option: ssh -X root@localhost
> > until Debian killed it with some new policy.
>

>      AFAIR, ssh -Y is used for backward compatibility with old
> software (like libroot), but, normally, -X is enough.

>

>      I don't know how one can prevent you from running ssh -X 
> root@localhost . Permission to do so is set/unset
> in /etc/ssh/sshd_config .

..ok, how?

--
..med vennlig hilsen = with Kind Regards from Arnt Karlsen
...with a number of polar bear hunters in his ancestry...
Scenarios always come in sets of three:
best case, worst case, and just in case.