Security concerns about xfce4-session

[Benedikt Meurer]

Coywolf Qi Hunt wrote:
> Hello people,
> 
> Just now when I nmap'ed my box, I noticed, xfce4-session was listening
> on tcp port: 1025.
> Is this normal? After I restart the whole X, xfce4-session no longer
> listens on any tcp port just as the usual case. (This is in debian,
> and the scripts do not append --disable-tcp to xfce4-session.)
> 
> why this happened? any idea?

Uncheck Settings Manager -> Session and Startup -> Advanced -> Security 
-> [ ] Manage remote applications

> --coywolf

Benedikt