[X2Go-Commits] [x2goserver] 02/02: Add man page for x2gogetapps. Weave into that a security / disclaimer message as proposed by Stefan Baur. (Fixes: #728).

[git-admin at x2go.org]

This is an automated email from the git hooks/post-receive script.

x2go pushed a commit to branch release/4.0.1.x
in repository x2goserver.

commit 7fed5538087dcb3ef76128f1830a61b0fc3cbdd9
Author: Mike Gabriel <mike.gabriel at das-netzwerkteam.de>
Date:   Thu Feb 5 12:41:58 2015 +0100

    Add man page for x2gogetapps. Weave into that a security / disclaimer message as proposed by Stefan Baur. (Fixes: #728).
---
 debian/changelog                  |    2 ++
 x2goserver/man/man8/x2gogetapps.8 |   58 +++++++++++++++++++++++++++++++++++++
 2 files changed, 60 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index 1839221..d58144d 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -71,6 +71,8 @@ x2goserver (4.0.1.19-0x2go1) UNRELEASED; urgency=medium
       that. Works around a too-old DBD::SQLite package on SLE 11.x.
     - Legacy for applications (and X2Go scripts) that expect $SSH_CLIENT to be
       set in the X2Go session's environment. (Fixes: #644).
+    - Add man page for x2gogetapps. Weave into that a security / disclaimer
+      message as proposed by Stefan Baur. (Fixes: #728).
   * debian/control:
     + Add D (x2goserver): libfile-which-perl.
     + Add C (x2goserver: x2godesktopsharing (<< 3.1.1.2-0~). (Fixes: #700).
diff --git a/x2goserver/man/man8/x2gogetapps.8 b/x2goserver/man/man8/x2gogetapps.8
new file mode 100644
index 0000000..59bc33d
--- /dev/null
+++ b/x2goserver/man/man8/x2gogetapps.8
@@ -0,0 +1,58 @@
+'\" -*- coding: utf-8 -*-
+.if \n(.g .ds T< \\FC
+.if \n(.g .ds T> \\F[\n[.fam]]
+.de URL
+\\$2 \(la\\$1\(ra\\$3
+..
+.if \n(.g .mso www.tmac
+.TH x2gogetapps 8 "Feb 2015" "Version 4.0.1.19" "X2Go Server Tool"
+.SH NAME
+x2gogetapps \- Generate list of Published Applications
+.SH SYNOPSIS
+'nh
+.fi
+.ad l
+x2gogetapps
+
+.SH DESCRIPTION
+\fBx2gogetapps\fR returns a machine-readable list of X2Go Published Applications.
+This command is evoked from connected X2Go client applications.
+.PP
+\fBx2gogetapps\fR is run with normal user privileges.
+
+.SH RETURN VALUES
+\fBx2gogetapps\fR returns one or multiple items in the below format:
+
+  <icon>
+  [ ... base64 encoded image information ...]
+  </icon>
+  <desktop>
+  [ ... selected fields form .desktop file ... ]
+  </desktop>
+  ...
+
+As exitcode \fBx2gogetapps\fR always returns 0.
+
+.SH SECURITY INFORMATION / DISCLAIMER
+Users are advised to not misinterpret X2GoServer's Published Application
+Mode as a security feature.
+.PP
+Even when using Published Application Mode, it is still possible for
+users to locally configure an X2Go Client with any setting they want, and
+use that to connect.
+.PP
+So if you're trying to keep users from running a
+certain application on the host, using Published Application Mode to
+"lock" the configuration is the *wrong* way.  The users will still be
+able to run that application by creating their own, local configuration
+file and using that.
+.PP
+To keep users from running an application on the
+server, you have to use *filesystem permissions*.  In the simplest case,
+this means setting chmod 750 or 550 on the particular application on the
+host, and making sure the users in question are not the owner and also
+not a member of the group specified for the application.
+
+.SH AUTHOR
+This manual has been written by Mike Gabriel <mike.gabriel at das-netzwerkteam.de> for the X2Go project
+(http://www.x2go.org).

--
Alioth's /srv/git/_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goserver.git