LX0-104 · Question #515
Why is the xhost program considered dangerous to use?
The correct answer is B. It allows easy access to your X server by other users.. The xhost command is dangerous because it can grant broad, unauthenticated access to an X server, potentially allowing any user from a specified host to view and control the display.
Question
Options
- AIt makes it difficult to uniquely identify a computer on the network.
- BIt allows easy access to your X server by other users.
- CIt logs sensitive information to syslog.
- DIt makes your computer share network resources without any authentication.
- EIt is a graphical DNS tool with known exploits.
How the community answered
(46 responses)- A4% (2)
- B89% (41)
- D2% (1)
- E4% (2)
Why each option
The `xhost` command is dangerous because it can grant broad, unauthenticated access to an X server, potentially allowing any user from a specified host to view and control the display.
`xhost` relates to X server access control, not network identification.
The `xhost` command, particularly when used to allow access from any host (e.g., `xhost +`), bypasses authentication mechanisms and grants other users on the network unrestricted access to your X server. This means they can view your screen, capture keystrokes, and even inject events, posing a significant security risk.
`xhost` itself does not log sensitive information to syslog; its danger lies in the access it grants.
`xhost` shares X server resources (display, input) without authentication, not general network resources like fileshares, though the X server access can be quite broad.
`xhost` is an X server access control tool, not a graphical DNS tool, and its danger comes from its intended function, not specific exploits against the tool itself.
Concept tested: X server security (xhost)
Source: https://linux.die.net/man/1/xhost
Topics
Community Discussion
No community discussion yet for this question.