freebsd stable - Mar 2016 - Why must X open TCP by default?

On Wed, 2 Mar 2016 12:44:18 -0800 Freddie Cash <fjwcash at gmail.com>
wrote
> On Wed, Mar 2, 2016 at 12:40 PM, Chris H <bsd-lists at bsdforge.com>
wrote:
> 
> > Hello,
> >  This is regarding 9-STABLE. All of the 9-STABLE boxes
> > that have Xorg installed, and running on them, insist on
> > opening TCP port 6000; as reported by sockstat(1)
> >
> > Xorg       1295  1  tcp6   *:6000                *:*
> > Xorg       1295  3  tcp4   *:6000                *:*
> >
> > I see that the (current(ish)) documentation indicates
> > that this option is off, by default, and can be enabled
> > by passing -listen_tcp to startx(1). This seems to hold
> > true, as all of my -CURRENT boxes do not show port 6000
> > as being open while X is running. So my question is;
> > how can I prevent X from opening tcp ports?
> > I attempted;
> > startx -nolisten tcp
> >
> 
> ?Does the following work (note the extra -- in the command)??
> 
> ?startx -- -nolisten tcp?
Hello, Freddie.
Good catch, by both you, and Brandon. I just tried it. But
sockstat(1) still reports 6000 being open. Closing the X
server, and session, reveal that 6000 is no longer open.
Bummer.

Thanks to both of you for the fast, and informative reply!

--Chris

On Wed, Mar 2, 2016 at 3:56 PM, Chris H <bsd-lists at bsdforge.com> wrote:
> Good catch, by both you, and Brandon. I just tried it. But
> sockstat(1) still reports 6000 being open. Closing the X
> server, and session, reveal that 6000 is no longer open.
> Bummer.
>
Check `man 7 Xserver` to verify the option needed. You might also have to
check the xserverrc file (I don't recall where it is offhand and can't
really check right now, but startx is a shell script and the default
xserverrc will be set near the top) to see if it is overriding the option.
In that case you could copy the xserverrc to ~/.xserverrc (make sure it's
chmod +x) and edit that copy to force nolisten tcp, or for multiple users
you'd edit the master xserverrc but may need to remember to re-edit after
system updates.

-- 
brandon s allbery kf8nh                               sine nomine associates
allbery.b at gmail.com                                  ballbery at
sinenomine.net
unix, openafs, kerberos, infrastructure, xmonad        http://sinenomine.net