- # allow connections to our x server from the local host.
- if [ ! -z "$DISPLAY" ]; then
- if [ ! -z "$(echo "$OS_TYPE" | grep -i darwin)" ]; then
- if [ ! -z "$SHELL_DEBUG" ]; then echo Enabling localhost X connections...; fi
- xhost + localhost >/dev/null 2>&1
- fi
- fi
+## disabled since we don't think is needed any more, and it's just an
+## attack surface if the other users on the host are not trusted.
+# # allow connections to our x server from the local host.
+# if [ ! -z "$DISPLAY" ]; then
+# if [ ! -z "$(echo "$OS_TYPE" | grep -i darwin)" ]; then
+# if [ ! -z "$SHELL_DEBUG" ]; then echo "Enabling localhost X connections..."; fi
+# xhost + localhost >/dev/null 2>&1
+# fi
+# fi