Xpra: Ticket #106: Xvfb binds to a TCP port by default

Xvfb binds to a TCP port on 0.0.0.0, which is not optimal from a security/sysadmin point of view. It's easily fixable using --xvfb, but it would be awesome to have "-nolisten tcp" added to the default arguments to Xvfb.

Thanks!



Fri, 06 Apr 2012 09:56:16 GMT - Antoine Martin: status, description, milestone changed; resolution set

Just tested this option on:

And all worked as expected, so committed this in r707, added it to the milestone 0.2 page to make sure this gets tested again before release.

Here is a sample command line (as seen with ps) it generated:

Xvfb-for-Xpra-:9 +extension Composite \
   -screen 0 3840x2560x24+32 -nolisten tcp
   -noreset -auth /var/run/gdm/auth-for-antoine-fRs1Bw/database :9

Sat, 23 Jan 2021 04:45:43 GMT - migration script:

this ticket has been moved to: https://github.com/Xpra-org/xpra/issues/106