Restricting Access with the Host Access Control List
To make use of this security feature, you must first select a host access control mode. If necessary, you can edit the Host Access Control List (ACL) so that it includes only those hosts to which you want to grant access by modifying the xhost.txt file. You can also enable the Allow X Clients To Modify Host ACL option and grant hosts the privilege of adding other hosts to the ACL.
For example, if there is only one host "A" in the ACL, then one way to allow host "B" to display X applications on the X server is to add "B" to xhost.txt. Alternatively, you can allow host "A" to grant host "B" the privilege. You can do this by enabling the Allow X Clients To Modify Host ACL option. After the option is enabled and the server is reset, a user can run the following commands on host "A" to add host "B" to the ACL:
-
% setenv DISPLAY xserver:display_number
-
% xhost +B
where B represents the host name or IP address.
X applications from host "B" can now be displayed on the specified X server. For more information on xhost commands, see the xhost manual pages on a UNIX host.
To select a host access control mode:
- Select the Xconfig file in which you want to configure the control mode and open the Exceed onDemand Xconfig dialog box.
- On the Security page, select a host access control mode:
- Use Host ACL FileLimits access to your Exceed onDemand session to specific hosts specified in the ACL file. If you select this option, you should edit the ACL file so that it contains all hosts to which you want to grant access rights. For more information, see Editing the Host Access Control List.
- No Host AccessInstructs Exceed onDemand to use an empty Host Access Control List to regulate access. With an empty list, no hosts are granted access.
- Any Host AccessTerminates the use of the Host Access Control List and grants unrestricted access to all hosts on the network.
- Select Allow X Clients To Modify Host ACL if you want to grant ACL file access to other hosts.
- Click OK to save changes and return to the previous dialog box or click Apply and select another tab to continue modifying the Xconfig file.
Related Topics
About X Session Security
Restricting Access with the User Access Control List