https://bugzilla.novell.com/show_bug.cgi?id=795791 https://bugzilla.novell.com/show_bug.cgi?id=795791#c1 Henk van Velden changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |henk.vanvelden@xs4all.nl --- Comment #1 from Henk van Velden 2012-12-23 10:51:48 UTC --- I can confirm that the same happens on 12.2. I consider thi as a security bug. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=795791 https://bugzilla.novell.com/show_bug.cgi?id=795791#c3 Stakanov Schufter changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |stakanov@freenet.de --- Comment #3 from Stakanov Schufter 2013-12-10 20:05:03 UTC --- I hope that somebody is after this because it is perfectly valid for opensuse 13.1 with kde 4.11.3 sudo netstat -lpn --tcp Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 0.0.0.0:6002 0.0.0.0:* LISTEN 4546/Xorg tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN 4955/cupsd tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 2113/master tcp 0 0 0.0.0.0:6001 0.0.0.0:* LISTEN 3372/Xorg tcp 0 0 :::6002 :::* LISTEN 4546/Xorg tcp 0 0 :::631 :::* LISTEN 1/init tcp 0 0 :::6001 :::* LISTEN 3372/Xorg I found this via zenmap telling me that I was listening on 6001 and 6002. Then via google I found this. Is there a workaround for kdm in the meantime to get rid of X listening? The scenario is exactly the one of the OP. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=795791 https://bugzilla.novell.com/show_bug.cgi?id=795791#c5 --- Comment #5 from Stakanov Schufter 2014-02-23 17:54:07 UTC --- 4.11.6 opensuse 13.1 fresh install. Opensuse did proudly listen on the ports as of above. So, kdmrc lists: serverargs=nolisten (commented out stating: if nothing listed, default so nolisten). Since the defaults are nor respected and X does listen on 6001,6002 ecc, who say to me actually that the setting "local only" is respected. There is the following workaround that for now does stop the problem. You go to /usr/share/kde4/config/kdm/kdmrc and set the serverags=nolisten explicit. Then it stops but every update of KDE it has to be apparently redone. Default values should do this correctly, so why do we have this problem since 12.1? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.