x2go-commits October 2014

x2go-commits@lists.x2go.org

2 participants
478 discussions

page changed: events:x2go-gathering-2014
by wiki-admin＠x2go.org 31 Oct '14

31 Oct '14

A page in your DokuWiki was added or changed. Here are the details: Date : 2014/10/31 23:48 Browser : Mozilla/5.0 (X11; Linux x86_64; rv:32.0) Gecko/20100101 Firefox/32.0 Iceweasel/32.0 IP-Address : 79.228.221.115 Hostname : p4FE4DD73.dip0.t-ipconnect.de Old Revision: http://wiki.x2go.org/doku.php/events:x2go-gathering-2014?rev=1414799227 New Revision: http://wiki.x2go.org/doku.php/events:x2go-gathering-2014 Edit Summary: User : sunweaver @@ -89,18 +89,19 @@ | 11.30h | 20min break ||| | 11.50h | Future organizational structure of the X2Go project | //Heinz-Markus Graesing// and //Mike Gabriel// | Open Discussion, 5min-10min breaks will be inserted as needed by the participants | | 12.35h | self-organized lunch break || no lunch will be served | | 13.20h | Coal miners group: Leave for guided tour | //Stefan Baur// | details see below / Stefan will buy a 5-person day pass and a 1-person day pass for "Zone A" => that's 18,50 EUR + 6,50 EUR = 25 EUR total| - | 14.30h | X2Go Session Broker | //Mike Gabriel// | | + | 14.30h | X2Go Session Broker I | //Mike Gabriel// | | | 15.15h | Support for rbash, PostgreSQL, GSSAPI | //Henning Heinold// | | | 16.00h | <open slot> for coders group / free coding | | | | 16.25h | Kjetil's departure | | walk to Essen-Horst (arr: 16:40) / 5 minutes to buy the ticket / 16:45 Subway from Essen-Horst to Essen Central Station (arr: 16:55) / 17:09 local train from Essen Central Station to DUS (arr: 17:31) | | 16.55h | Coders group: Leave for dinner time at Unperfekthaus, Essen | //Mike Gabriel// | details see below / Mike#1 will buy a 5-person day pass for "Zone A". => that's 18,50 EUR total | | 17.45h | Re-join at Unperfekthaus, Essen ||| | 18.00h | Dinner at Unperfekthaus ||| | 19.00h | Option to either travel back to the hotel or to visit Unperfekthaus exhibition or discuss with people || //we need to form groups of ~ 5 people that share a common decision to either travel back or stay, due to the tickets involved// | | 21.30h | "Last chance" to travel back to Linux Hotel ||| - | 22:30h and beyond | open coding session / bug squashing ||| + | 22.00h | X2Go Session Broker II | //Mike Gabriel// | | + | 22:45h and beyond | open coding session / bug squashing ||| === English guided tour: About Coal and Miners === -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page changed: events:x2go-gathering-2014
by wiki-admin＠x2go.org 31 Oct '14

31 Oct '14

A page in your DokuWiki was added or changed. Here are the details: Date : 2014/10/31 23:47 Browser : Mozilla/5.0 (X11; Linux x86_64; rv:32.0) Gecko/20100101 Firefox/32.0 Iceweasel/32.0 IP-Address : 79.228.221.115 Hostname : p4FE4DD73.dip0.t-ipconnect.de Old Revision: http://wiki.x2go.org/doku.php/events:x2go-gathering-2014?rev=1414799173 New Revision: http://wiki.x2go.org/doku.php/events:x2go-gathering-2014 Edit Summary: User : sunweaver @@ -87,9 +87,8 @@ | 10.10h | X2Go's State of the Union Address | //Mike Gabriel// | | | 10.45h | mTeleplayer/Telekinesis/X2Go Server 5 | //TheUser2 (via Skype)// | | | 11.30h | 20min break ||| | 11.50h | Future organizational structure of the X2Go project | //Heinz-Markus Graesing// and //Mike Gabriel// | Open Discussion, 5min-10min breaks will be inserted as needed by the participants | - | 11.50h | Crowd-funding NX rewrite/rebasing | //Mike Gabriel// and //Heinz-Markus Graesing// | Open Discussion | | 12.35h | self-organized lunch break || no lunch will be served | | 13.20h | Coal miners group: Leave for guided tour | //Stefan Baur// | details see below / Stefan will buy a 5-person day pass and a 1-person day pass for "Zone A" => that's 18,50 EUR + 6,50 EUR = 25 EUR total| | 14.30h | X2Go Session Broker | //Mike Gabriel// | | | 15.15h | Support for rbash, PostgreSQL, GSSAPI | //Henning Heinold// | | -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page changed: events:x2go-gathering-2014
by wiki-admin＠x2go.org 31 Oct '14

31 Oct '14

A page in your DokuWiki was added or changed. Here are the details: Date : 2014/10/31 23:46 Browser : Mozilla/5.0 (X11; Linux x86_64; rv:32.0) Gecko/20100101 Firefox/32.0 Iceweasel/32.0 IP-Address : 79.228.221.115 Hostname : p4FE4DD73.dip0.t-ipconnect.de Old Revision: http://wiki.x2go.org/doku.php/events:x2go-gathering-2014?rev=1414775425 New Revision: http://wiki.x2go.org/doku.php/events:x2go-gathering-2014 Edit Summary: User : sunweaver @@ -86,8 +86,9 @@ | //in parallel// 09.00h-10.10h | Payment Time! | //Stefan Baur// | Stefan will collect the hotel fees from each participant (invoices available, if you need one for your employer/tax declaration) | | 10.10h | X2Go's State of the Union Address | //Mike Gabriel// | | | 10.45h | mTeleplayer/Telekinesis/X2Go Server 5 | //TheUser2 (via Skype)// | | | 11.30h | 20min break ||| + | 11.50h | Future organizational structure of the X2Go project | //Heinz-Markus Graesing// and //Mike Gabriel// | Open Discussion, 5min-10min breaks will be inserted as needed by the participants | | 11.50h | Crowd-funding NX rewrite/rebasing | //Mike Gabriel// and //Heinz-Markus Graesing// | Open Discussion | | 12.35h | self-organized lunch break || no lunch will be served | | 13.20h | Coal miners group: Leave for guided tour | //Stefan Baur// | details see below / Stefan will buy a 5-person day pass and a 1-person day pass for "Zone A" => that's 18,50 EUR + 6,50 EUR = 25 EUR total| | 14.30h | X2Go Session Broker | //Mike Gabriel// | | @@ -152,11 +153,11 @@ ==== Sunday 2014-11-02 ==== ^time slot ^ Topic ^ Speaker / Moderator ^ Comment ^ | 09.00h | Breakfast (until 10.00h) | <all> | ROOMS MUST BE CLEANED OF TRASH AND CLEARED OF YOUR PERSONAL BELONGINGS BY 1000 hours/10am local time! | - | 10.00h | X2Go / MATE / Ubuntu MATE Remix | //Martin Wimpress// and //Mike Gabriel// | status quo, RFHs | + | 10.00h | Crowd-funding NX rewrite/rebasing | //Mike Gabriel// and //Heinz-Markus Graesing// | Open Discussion | | 10.45 | 15min break | //Stefan Baur// | order pizza for arrival at 12.30h | - | 11.00h | Future organizational structure of the X2Go project | //Heinz-Markus Graesing// and //Mike Gabriel// | Open Discussion, 5min-10min breaks will be inserted as needed by the participants | + | 11.00h | X2Go / MATE / Ubuntu MATE Remix | //Martin Wimpress// and //Mike Gabriel// | status quo, RFHs | | 12.30h | lunch break ||| | 13.00h | Video recording session showing all production-ready X2Go features? | //Stefan Baur, ...// | The plan is to upload this to YouTube later on | | 14.00h | 20min break | <all> | for discussion / exchange | | 14.20h | open coding/bugsquashing/chillout as desired ||| -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page changed: wiki:security:rbash
by wiki-admin＠x2go.org 31 Oct '14

31 Oct '14

1 0

page changed: wiki:security:rbash
by wiki-admin＠x2go.org 31 Oct '14

31 Oct '14

A page in your DokuWiki was added or changed. Here are the details: Date : 2014/10/31 22:11 Browser : Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/37.0.2062.120 Chrome/37.0.2062.120 Safari/537.36 IP-Address : 79.228.221.115 Hostname : p4FE4DD73.dip0.t-ipconnect.de Old Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash?rev=1414791557 New Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash Edit Summary: [Link the needed programs to setup a session] User : woglinde @@ -72,5 +72,20 @@ Because some programs are written in perl and need fragments from the x2go-lib dir and it is searched relative, the lib-directory needs to be linked too. <code bash> mkdir /opt/rbash/lib cd /opt/rbash/lib && ln -s /usr/lib/x2go . + </code> + + ====== Bring the path back to some scripts ====== + Because we set the PATH to /opt/rbash/bin some scripts needs to set it back to be functional again. + + <code bash> + x2gopath + x2goruncommand + x2gostartagent + x2goterminate-session + </code> + + After the license header add the following to all files mentioned above + <code bash> + export PATH=/bin:/usr/bin:/sbin:/usr/sbin </code> -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page changed: wiki:security:rbash
by wiki-admin＠x2go.org 31 Oct '14

31 Oct '14

A page in your DokuWiki was added or changed. Here are the details: Date : 2014/10/31 21:39 Browser : Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/37.0.2062.120 Chrome/37.0.2062.120 Safari/537.36 IP-Address : 79.228.221.115 Hostname : p4FE4DD73.dip0.t-ipconnect.de Old Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash?rev=1414791300 New Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash Edit Summary: [Link the needed programs to setup a session] User : woglinde @@ -63,7 +63,14 @@ /usr/bin/x2goruncommand /usr/bin/x2gostartagent /usr/bin/x2goterminate-session + mkdir /opt/rbash/bin cd /opt/rbash/bin && ln -s /usr/bin/{setsid,whoami,x2goagent,x2golistsessions,x2gopath,\ x2goruncommand,x2gostartagent,x2goterminate-session} . + </code> + + Because some programs are written in perl and need fragments from the x2go-lib dir and it is searched relative, the lib-directory needs to be linked too. + <code bash> + mkdir /opt/rbash/lib + cd /opt/rbash/lib && ln -s /usr/lib/x2go . </code> -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page changed: wiki:security:rbash
by wiki-admin＠x2go.org 31 Oct '14

31 Oct '14

A page in your DokuWiki was added or changed. Here are the details: Date : 2014/10/31 21:35 Browser : Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/37.0.2062.120 Chrome/37.0.2062.120 Safari/537.36 IP-Address : 79.228.221.115 Hostname : p4FE4DD73.dip0.t-ipconnect.de Old Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash?rev=1414791061 New Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash Edit Summary: [Link the needed programs to setup a session] User : woglinde @@ -51,4 +51,19 @@ We set the **PATH** to a new directory, so the users can only access the commands from this dir. ====== Link the needed programs to setup a session ====== + The following programs are needed to link to the new created directory. + + <code bash> + /usr/bin/setsid + /usr/bin/whoami + /usr/bin/x2goagent + /usr/bin/x2golistsessions + /usr/bin/x2gopath + /usr/bin/x2goruncommand + /usr/bin/x2gostartagent + /usr/bin/x2goterminate-session + + cd /opt/rbash/bin && ln -s /usr/bin/{setsid,whoami,x2goagent,x2golistsessions,x2gopath,\ + x2goruncommand,x2gostartagent,x2goterminate-session} . + </code> -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page changed: wiki:security:rbash
by wiki-admin＠x2go.org 31 Oct '14

31 Oct '14

A page in your DokuWiki was added or changed. Here are the details: Date : 2014/10/31 21:31 Browser : Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/37.0.2062.120 Chrome/37.0.2062.120 Safari/537.36 IP-Address : 79.228.221.115 Hostname : p4FE4DD73.dip0.t-ipconnect.de Old Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash?rev=1414789534 New Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash Edit Summary: [secure ssh access] User : woglinde @@ -48,5 +48,7 @@ /bin/rbash fi </code> - We set the **PATH** to a new directory, so the users can only access the commands inside this dir, as mentioned earlire + We set the **PATH** to a new directory, so the users can only access the commands from this dir. + + ====== Link the needed programs to setup a session ====== -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page changed: wiki:security:rbash
by wiki-admin＠x2go.org 31 Oct '14

31 Oct '14

A page in your DokuWiki was added or changed. Here are the details: Date : 2014/10/31 21:05 Browser : Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/37.0.2062.120 Chrome/37.0.2062.120 Safari/537.36 IP-Address : 79.228.221.115 Hostname : p4FE4DD73.dip0.t-ipconnect.de Old Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash?rev=1414789289 New Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash Edit Summary: [secure ssh access] User : woglinde @@ -47,4 +47,6 @@ else /bin/rbash fi </code> + + We set the **PATH** to a new directory, so the users can only access the commands inside this dir, as mentioned earlire -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page changed: wiki:security:rbash
by wiki-admin＠x2go.org 31 Oct '14

31 Oct '14

A page in your DokuWiki was added or changed. Here are the details: Date : 2014/10/31 21:01 Browser : Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/37.0.2062.120 Chrome/37.0.2062.120 Safari/537.36 IP-Address : 79.228.221.115 Hostname : p4FE4DD73.dip0.t-ipconnect.de Old Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash?rev=1414789185 New Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash Edit Summary: [secure ssh access] User : woglinde @@ -30,12 +30,12 @@ To make sure the users can only access rbash, setup ssh to use **ForceCommand**, otherwise the users can run any other shells or commands over ssh. Therefore edit /etc/ssh/sshd_config and put the the following lines at the end. - <note> + <code bash> Match group rbrowser ForceCommand sshcommand - </note> + </code> ForceCommand only works for a sshd matching section. So you can dedicate the rbash to a certain group. **sshcommand** is a small shell script to wrap the rbash usage, -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

x2go-commits October 2014