Please clarify if it is possible to use the X server without exposing ports to the whole internet

[callegar]

Hi,

Would be great if some notes could be dropped in the readme on the best approach to use the xserver without exposing ports to the whole internet. This could be important, as I read that XSDL is based on the original Xorg code that can be expected to still have some security flaw.

1. Can the application be used without listening to TCP at all? Can termux applications talk to the server on local sockets?
2. In case the previous answer is no, is there a way to limit xsld to listening on the loop interface only? Or does one necessarily need a firewall?

As an additional question, for what regards local applications, is there a way to used shared memory mechanisms to improve efficiency?

[pelya]

Tap 'Change device config' at start -> 'Command line' -> add options

…

-nolisten tcp on two separate lines. As I remember, UNIX soocket connection stopped working on some version of Android, so it's likely that X server won't have any connectivity at all, and there's no option to bind to 127.0.0.1, you'll need to edit source code and recompile it.

On Sun, 3 Aug 2025, 10:33 Sergio Callegari, ***@***.***> wrote: *callegar* created an issue (pelya/xserver-xsdl#180) <#180> Hi, Would be great if some notes could be dropped in the readme on the best approach to use the xserver without exposing ports to the whole internet. This could be important, as I read that XSDL is based on the original Xorg code that can be expected to still have some security flaw. 1. Can the application be used without listening to TCP at all? Can termux applications talk to the server on local sockets? 2. In case the previous answer is no, is there a way to limit xsld to listening on the loop interface only? Or does one necessarily need a firewall? As an additional question, for what regards local applications, is there a way to used shared memory mechanisms to improve efficiency? — Reply to this email directly, view it on GitHub <#180>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AABF5QHML5QWI3EMXNUJQUL3LW3LLAVCNFSM6AAAAACC7U2DT6VHI2DSMVQWIX3LMV43ASLTON2WKOZTGI4DMNZZGY2TKMI> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>