SLAC Computer Security		Search SLAC
SLAC Home | Computing Home | Computing Outages | Help

X Server Policy

• Any computer connecting to the SLAC network that are running X servers must conform to the following configuration:
  
  
  • The X server needs to be configured to only accept connections from (a) X clients on the same machine as the server, or (b) via an encrypted SSHV2 tunnel.  It must not accept any direct connections from non-local X clients, which would allow passwords or other sensitive information to traverse the network in plaintext.
    
  • If a system runs a local firewall (e.g, WinXP systems), then the firewall must not allow other hosts to connect to the X server (except via an SSH tunnel, as above).