x2go-commits

x2go-commits@lists.x2go.org

1 participants
37910 discussions

page changed: events:x2go-gathering-2014
by wiki-admin＠x2go.org 02 Nov '14

02 Nov '14

A page in your DokuWiki was added or changed. Here are the details: Date : 2014/11/02 10:08 Browser : Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Firefox/31.0 IP-Address : 79.228.212.103 Hostname : p4FE4D467.dip0.t-ipconnect.de Old Revision: http://wiki.x2go.org/doku.php/events:x2go-gathering-2014?rev=1414921516 New Revision: http://wiki.x2go.org/doku.php/events:x2go-gathering-2014 Edit Summary: [Sunday 2014-11-02] User : stefanbaur @@ -156,12 +156,12 @@ | 10.30h-11.00h | Future organizational structure of the X2Go project | Heinz-Markus Graesing and Mike Gabriel | | 11.00h-11.30h | Crowdfunding | Crowd-funding NX rewrite/rebasing | //Mike Gabriel// and //Heinz-Markus Graesing// | Open Discussion | | 12.15h-12.30h | //Lightning Talk// X2Go / MATE / Ubuntu MATE Remix | //Martin Wimpress// and //Mike Gabriel// | status quo, RFHs | | 12.30h-13.00h | Lunch break || - | 13.00h-13.15h | Cleaning Rage || - | 13.15h-14.00h | Feedback, Video, whatever|| + | 13.00h-13.30h | Cleaning Rage || + | 13.30h-14.00h | first conference room inspection w/ Linuxhotel staff | Mihai, Mike#2, Uwe, Stefan will leave afterwards | | 14.00h-15.30h | ??? || - | 15.30h-15.55h | Conference room inspection w/ hotel staff || + | 15.30h-15.55h | second conference room inspection w/ hotel staff || === Room Cleaning Rage === * we need to clean the rooms ourselves, that's one of the reasons why the rates are so cheap -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page changed: events:x2go-gathering-2014
by wiki-admin＠x2go.org 02 Nov '14

02 Nov '14

A page in your DokuWiki was added or changed. Here are the details: Date : 2014/11/02 09:45 Browser : Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Firefox/31.0 IP-Address : 79.228.212.103 Hostname : p4FE4D467.dip0.t-ipconnect.de Old Revision: http://wiki.x2go.org/doku.php/events:x2go-gathering-2014?rev=1414837391 New Revision: http://wiki.x2go.org/doku.php/events:x2go-gathering-2014 Edit Summary: [Sunday 2014-11-02] User : stefanbaur @@ -152,19 +152,16 @@ ==== Sunday 2014-11-02 ==== ^time slot ^ Topic ^ Speaker / Moderator ^ Comment ^ - | 09.00h | Breakfast (until 10.00h) | <all> | ROOMS MUST BE CLEANED OF TRASH AND CLEARED OF YOUR PERSONAL BELONGINGS BY 1000 hours/10am local time! | - | 10.00h | Crowd-funding NX rewrite/rebasing | //Mike Gabriel// and //Heinz-Markus Graesing// | Open Discussion | - | 10.45 | 15min break | //Stefan Baur// | order pizza for arrival at 12.30h | - | 11.00h | X2Go / MATE / Ubuntu MATE Remix | //Martin Wimpress// and //Mike Gabriel// | status quo, RFHs | - | 12.30h | lunch break ||| - | 13.00h | Video recording session showing all production-ready X2Go features? | //Stefan Baur, ...// | The plan is to upload this to YouTube later on | - | 14.00h | 20min break | <all> | for discussion / exchange | - | 14.20h | open coding/bugsquashing/chillout as desired ||| - | 15.20h | conference room cleaning rage / goodbye X2Go Gathering 2014 / departure ||| - - + | 10.30h-11.00h | Future organizational structure of the X2Go project | Heinz-Markus Graesing and Mike Gabriel | + | 11.00h-11.30h | Crowdfunding | Crowd-funding NX rewrite/rebasing | //Mike Gabriel// and //Heinz-Markus Graesing// | Open Discussion | + | 12.15h-12.30h | //Lightning Talk// X2Go / MATE / Ubuntu MATE Remix | //Martin Wimpress// and //Mike Gabriel// | status quo, RFHs | + | 12.30h-13.00h | Lunch break || + | 13.00h-13.15h | Cleaning Rage || + | 13.15h-14.00h | Feedback, Video, whatever|| + | 14.00h-15.30h | ??? || + | 15.30h-15.55h | Conference room inspection w/ hotel staff || === Room Cleaning Rage === * we need to clean the rooms ourselves, that's one of the reasons why the rates are so cheap -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

[x2goserver] branch master updated (cfb21be -> e9cd02f)
by git-admin＠x2go.org 01 Nov '14

01 Nov '14

This is an automated email from the git hooks/post-receive script. x2go pushed a change to branch master in repository x2goserver. from cfb21be Move X2Go Desktop Sharing options around. Make sure all desktop sharing relevant options are provided at the beginning when evoking the "x2godesktopsharing client" command. new 9e467c5 Make sure that all "su"-to-user-contexts use /bin/sh for wrapping around the executed command (in x2gocleansessions and x2golistsessions_root) new e9cd02f debian/x2goserver.service: Provide system system service file. The 2 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "adds" were already present in the repository and have only been added to this reference. Summary of changes: debian/changelog | 4 ++++ debian/control | 3 ++- debian/x2goserver.service | 1 + x2goserver/sbin/x2gocleansessions | 24 ++++++++++++------------ x2goserver/sbin/x2golistsessions_root | 2 +- 5 files changed, 20 insertions(+), 14 deletions(-) create mode 120000 debian/x2goserver.service -- Alioth's /srv/git/_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goserver.git

1 2

[x2goserver] branch release/4.0.1.x updated (78157ee -> 5f7752b)
by git-admin＠x2go.org 01 Nov '14

01 Nov '14

This is an automated email from the git hooks/post-receive script. x2go pushed a change to branch release/4.0.1.x in repository x2goserver. from 78157ee Move X2Go Desktop Sharing options around. Make sure all desktop sharing relevant options are provided at the beginning when evoking the "x2godesktopsharing client" command. new 5f7752b Make sure that all "su"-to-user-contexts use /bin/sh for wrapping around the executed command (in x2gocleansessions and x2golistsessions_root) The 1 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "adds" were already present in the repository and have only been added to this reference. Summary of changes: debian/changelog | 2 ++ x2goserver/sbin/x2gocleansessions | 24 ++++++++++++------------ x2goserver/sbin/x2golistsessions_root | 2 +- 3 files changed, 15 insertions(+), 13 deletions(-) -- Alioth's /srv/git/_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goserver.git

1 1

page changed: wiki:security:rbash
by wiki-admin＠x2go.org 01 Nov '14

01 Nov '14

A page in your DokuWiki was added or changed. Here are the details: Date : 2014/11/01 12:02 Browser : Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/37.0.2062.120 Chrome/37.0.2062.120 Safari/537.36 IP-Address : 79.228.221.115 Hostname : p4FE4DD73.dip0.t-ipconnect.de Old Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash?rev=1414843311 New Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash Edit Summary: User : woglinde @@ -8,9 +8,9 @@ There are serval options to prevent the user doing it. One would be the use of selinux, but it is hard to understand and hard to setup correctly. Another option is the use of rbash, but with the current state of x2go-server there are serval steps so setup it up working correctly. - This guide is focused on a single application approach, no audio, remote/mounted dirs and printing is involved. + This guide is focused on a single application approach, no audio, remote/mounted dirs and printing are involved. ====== rbash short feature overview ====== rbash has some intressting features: -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page changed: wiki:security:rbash
by wiki-admin＠x2go.org 01 Nov '14

01 Nov '14

A page in your DokuWiki was added or changed. Here are the details: Date : 2014/11/01 12:01 Browser : Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/37.0.2062.120 Chrome/37.0.2062.120 Safari/537.36 IP-Address : 79.228.221.115 Hostname : p4FE4DD73.dip0.t-ipconnect.de Old Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash?rev=1414836044 New Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash Edit Summary: User : woglinde @@ -7,8 +7,10 @@ There are serval options to prevent the user doing it. One would be the use of selinux, but it is hard to understand and hard to setup correctly. Another option is the use of rbash, but with the current state of x2go-server there are serval steps so setup it up working correctly. + + This guide is focused on a single application approach, no audio, remote/mounted dirs and printing is involved. ====== rbash short feature overview ====== rbash has some intressting features: -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page changed: events:x2go-gathering-2014
by wiki-admin＠x2go.org 01 Nov '14

01 Nov '14

A page in your DokuWiki was added or changed. Here are the details: Date : 2014/11/01 10:23 Browser : Mozilla/5.0 (X11; Linux i686; rv:31.0) Gecko/20100101 Firefox/31.0 Iceweasel/31.2.0 IP-Address : 79.228.221.115,172.16.0.110 Hostname : p4FE4DD73.dip0.t-ipconnect.de,172.16.0.110 Old Revision: http://wiki.x2go.org/doku.php/events:x2go-gathering-2014?rev=1414799291 New Revision: http://wiki.x2go.org/doku.php/events:x2go-gathering-2014 Edit Summary: [List of Participants] User : stefanbaur @@ -47,15 +47,15 @@ - Burger, Uwe - DePaulo, Michael - Graesing, Heinz-Markus - Moldovan, Mihai - - Wimpress, Martin David **(Saturday) Stay-behind group in alphabetical order: ** - Epema, Kees - //Gabriel, Mike// - Heinold, Henning - Heinold, Tobias + - Wimpress, Martin David - Wolfkamp, Jos ===== Schedule ===== -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page changed: wiki:security:rbash
by wiki-admin＠x2go.org 01 Nov '14

01 Nov '14

A page in your DokuWiki was added or changed. Here are the details: Date : 2014/11/01 10:00 Browser : Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/37.0.2062.120 Chrome/37.0.2062.120 Safari/537.36 IP-Address : 79.228.221.115 Hostname : p4FE4DD73.dip0.t-ipconnect.de Old Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash?rev=1414835843 New Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash Edit Summary: [Security concerns] User : woglinde @@ -91,9 +91,9 @@ <code bash> export PATH=/bin:/usr/bin:/sbin:/usr/sbin </code> - ====== Security concerns ====== + ===== Security concerns ===== There could be still problems to brake out of rbash, no one yet made a security audit of the linked x2go scripts, if they allow the execution of a real shell via options. ====== rbash as default shell (optional)====== -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page changed: wiki:security:rbash
by wiki-admin＠x2go.org 01 Nov '14

01 Nov '14

A page in your DokuWiki was added or changed. Here are the details: Date : 2014/11/01 09:57 Browser : Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/37.0.2062.120 Chrome/37.0.2062.120 Safari/537.36 IP-Address : 79.228.221.115 Hostname : p4FE4DD73.dip0.t-ipconnect.de Old Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash?rev=1414834038 New Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash Edit Summary: [Bring the path back to some scripts] User : woglinde @@ -91,8 +91,11 @@ <code bash> export PATH=/bin:/usr/bin:/sbin:/usr/sbin </code> + ====== Security concerns ====== + There could be still problems to brake out of rbash, no one yet made a security audit of the linked x2go scripts, if they allow the execution of a real shell + via options. ====== rbash as default shell (optional)====== If rbash is also set as the default shell via /etc/passwd or some other mechanism, the sessioncleanup skripts needs to be fixed too. -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page changed: wiki:security:rbash
by wiki-admin＠x2go.org 01 Nov '14

01 Nov '14

A page in your DokuWiki was added or changed. Here are the details: Date : 2014/11/01 09:27 Browser : Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/37.0.2062.120 Chrome/37.0.2062.120 Safari/537.36 IP-Address : 79.228.221.115 Hostname : p4FE4DD73.dip0.t-ipconnect.de Old Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash?rev=1414833870 New Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash Edit Summary: [rbash as default shell (optional)] User : woglinde @@ -96,5 +96,20 @@ If rbash is also set as the default shell via /etc/passwd or some other mechanism, the sessioncleanup skripts needs to be fixed too. + In + <code bash> + /usr/sbin/x2gocleansessions + </code> + the lines with + + <code bash> + system("su", "@sinfo[11]", "-c" + </code> + + needs to be changed to + + <code bash> + system("su", "@sinfo[11]", "-s", "/bin/bash", "-c", + </code> -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

x2go-commits