[X2Go-Commits] page changed: wiki:security:start

[wiki-admin at x2go.org]

A page in your DokuWiki was added or changed. Here are the details:

Date        : 2013/03/12 20:57
Browser     : Mozilla/5.0 (X11; Linux x86_64; rv:18.0) Gecko/20100101 Firefox/18.0 Iceweasel/18.0.1
IP-Address  : 46.142.148.41
Hostname    : 41-148-142-46.pool.kielnet.net
Old Revision: http://wiki.x2go.org/doku.php/wiki:security:start?rev=1363121694
New Revision: http://wiki.x2go.org/doku.php/wiki:security:start
Edit Summary: 
User        : sunweaver

@@ -1,14 +1,14 @@
  ~~NOTOC~~
- ====== Database Access ======
- ===== Postgres =====
+ ====== Session Database Backends ======
+ ===== PostgreSQL =====
  <note>No known exploits</note>
  
  ===== SQLite =====
  <note>No known exploits</note>
    
  
- ====== x2goprint ======
+ ====== X2Go client-side Printing ======
  <note important>Might be exploited if someone becomes x2goprint-user</note>
  
    - X2goServer == CUPS Server, latest implementation (as of 20110909): 
        - cups-x2go CUPS backend runs as root
@@ -52,8 +52,9 @@
    *
This also solves issues if the client get disconnected unexpectedly.
  
  Morty: I looked into this recently (End of 2011). Unfortunately, due to the buffering done on the server, this might start to "swing" (playback getting faster and slower again and again). 
  
- ====== x2goagent ======
+ ====== X2Go Agent ======
  
    * [[http://code.x2go.org/gitweb?p=x2goserver.git;a=commitdiff;h=147d22c44167b9b2d4afbdaf17262555a7af713b|This issue has been fixed]]: x2goagent/nxagent opens a port 6050+ and binds to all network interfaces. This should be tweaked so that x2goagent/nxagent binds to localhost only. Refer to: http://article.gmane.org/gmane.linux.terminal-server.x2go.user/430
+   * Now, only for XDMCP session the listening port 6050+ is opened (otherwise XDMCP queries do fail)
    



-- 
This mail was generated by DokuWiki at
http://wiki.x2go.org/