On Mon, Aug 20, 2001 at 02:23:48PM +0200, christian.burri@synecta.ch wrote:
I have a question about SSHD: Since I installed SuSE 7.2 (about a week ago), I keep getting a strange entry in the seccheck reports (very nice script, well done!):
+ sshd root TCP *:6010 (LISTEN)
Alarmed by this entry, I ran tripwire on the box, but it could not find any changed binaries. The entry is also not permanent, it does disappear and come back and I have, to be honest, no clear impression of what's going on.
In order to provide X forwarding, sshd creates virtual X interfaces at X (6000) + interface (10 or higher) = 6010 or higher.
Another theory would be that it has to do with X11 forwarding, but thats disabled in sshd config, too...
But this is not enforced. The users can enable it with the "-X" option or by an entry in their local $HOME/.ssh/ssh_config files. Best regards, Lutz -- Lutz Jaenicke Lutz.Jaenicke@aet.TU-Cottbus.DE BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-4129 Universitaetsplatz 3-4, D-03044 Cottbus Fax. +49 355 69-4153