[X2Go-Dev] Bug#287: Fwd: Re: Bug#287: Bug#287: x2goserver allows to connect to ALL X server sessions by default

[Stefan Baur]

Looks like this info wasn't sent to the bugtracker, forwarding manually.


-------- Original-Nachricht --------
Betreff: 	Re: [X2Go-Dev] Bug#287: Bug#287: x2goserver allows to connect 
to ALL X server sessions by default
Datum: 	Fri, 16 Aug 2013 13:41:34 +0000 (UTC)
Von: 	Fred Her. <x2go at edhil.net>
Antwort an: 	x2go-dev at lists.berlios.de
An: 	x2go-dev at lists.berlios.de



David Fuhrmann <fuhrmann_mail <at> web.de> writes:

>
> Hi,
>
> To rule out some specific configuration issue in our current system, I
installed a fresh linux mint inside a
> virtual machine and was able to confirm the issues.
>
> You should be able to reproduce it easily by doing the same. Choose Linux
Mint debian edition, 64 Bit, Mate
> package and install x2goserver following your instructions for debian 7.

I performed the test on the same configuration, and can confirm this issue:

On a fresh linux mint issue, Ubuntu edition, 64bits, MATE package.

x2go package installed :


ii  x2goserver                          4.0.1.6-0~712~raring1  amd64
ii  x2goserver-extensions               4.0.1.6-0~712~raring1  all
ii  x2goserver-xsession                 4.0.1.6-0~712~raring1  all

userA creates a session with a custom desktop (x-session-manager) and
connect. Then close the session window (but do not disconnect)

UserB creates a session with "connect to Local Desktop" and log in using his
own login and ssh password

UserB can connect to UserA desktop with full access.


As a workaround, ss there any x2goserver.conf parameters that could be used
to disable the Local Desktop access?






_______________________________________________
X2Go-Dev mailing list
X2Go-Dev at lists.berlios.de
https://lists.berlios.de/mailman/listinfo/x2go-dev