x2go-commits

x2go-commits@lists.x2go.org

1 participants
37910 discussions

page changed: wiki:security:rbash
by wiki-admin＠x2go.org 01 Nov '14

01 Nov '14

A page in your DokuWiki was added or changed. Here are the details: Date : 2014/11/01 09:24 Browser : Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/37.0.2062.120 Chrome/37.0.2062.120 Safari/537.36 IP-Address : 79.228.221.115 Hostname : p4FE4DD73.dip0.t-ipconnect.de Old Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash?rev=1414833828 New Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash Edit Summary: [rbash short feature overview] User : woglinde @@ -15,9 +15,9 @@ * cd is disabled * no redirections via > and >> are allowed * no calls of binaries via complete path - * no changes on the PATH variable are allowed + * no changes off the PATH variable are allowed But be aware, if rbash detects that a executebale is a shell-script it will be run with full bash. This means if you are able to access the bash executebale via the PATH-variable (remind full path like /bin/bash are not allowed), you can break out the rbash. -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page changed: wiki:security:rbash
by wiki-admin＠x2go.org 01 Nov '14

01 Nov '14

A page in your DokuWiki was added or changed. Here are the details: Date : 2014/11/01 09:23 Browser : Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/37.0.2062.120 Chrome/37.0.2062.120 Safari/537.36 IP-Address : 79.228.221.115 Hostname : p4FE4DD73.dip0.t-ipconnect.de Old Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash?rev=1414833719 New Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash Edit Summary: User : woglinde @@ -1,8 +1,10 @@ - The way x2go works, allows every user to get a ssh access to the x2go server. + The way x2go works, allows every user to get ssh access to the x2go server. This can be a big problem when, you can not use the broker, to prevent certain actions on - the server. The users can browse the x2go-server and have the access to nearly all directiores. + the x2go-server. + + The users can browse the x2go-server and have the access to nearly all directiores. There are serval options to prevent the user doing it. One would be the use of selinux, but it is hard to understand and hard to setup correctly. Another option is the use of rbash, but with the current state of x2go-server there are serval steps so setup it up working correctly. -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page changed: wiki:security:rbash
by wiki-admin＠x2go.org 01 Nov '14

01 Nov '14

A page in your DokuWiki was added or changed. Here are the details: Date : 2014/11/01 09:22 Browser : Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/37.0.2062.120 Chrome/37.0.2062.120 Safari/537.36 IP-Address : 79.228.221.115 Hostname : p4FE4DD73.dip0.t-ipconnect.de Old Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash?rev=1414793506 New Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash Edit Summary: [Fix session clean up] User : woglinde @@ -89,5 +89,10 @@ <code bash> export PATH=/bin:/usr/bin:/sbin:/usr/sbin </code> - ====== Fix session clean up ====== + ====== rbash as default shell (optional)====== + + If rbash is also set as the default shell via /etc/passwd or some other mechanism, the sessioncleanup skripts needs + to be fixed too. + + -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

[x2goserver] branch master updated (b003d37 -> cfb21be)
by git-admin＠x2go.org 01 Nov '14

01 Nov '14

This is an automated email from the git hooks/post-receive script. x2go pushed a change to branch master in repository x2goserver. from b003d37 improve last commit new cfb21be Move X2Go Desktop Sharing options around. Make sure all desktop sharing relevant options are provided at the beginning when evoking the "x2godesktopsharing client" command. The 1 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "adds" were already present in the repository and have only been added to this reference. Summary of changes: debian/changelog | 3 +++ x2goserver/bin/x2gostartagent | 4 ++-- 2 files changed, 5 insertions(+), 2 deletions(-) -- Alioth's /srv/git/_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goserver.git

1 1

[x2goserver] branch release/4.0.1.x updated (2aa4556 -> 78157ee)
by git-admin＠x2go.org 01 Nov '14

01 Nov '14

This is an automated email from the git hooks/post-receive script. x2go pushed a change to branch release/4.0.1.x in repository x2goserver. from 2aa4556 improve last commit new 78157ee Move X2Go Desktop Sharing options around. Make sure all desktop sharing relevant options are provided at the beginning when evoking the "x2godesktopsharing client" command. The 1 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "adds" were already present in the repository and have only been added to this reference. Summary of changes: debian/changelog | 3 +++ x2goserver/bin/x2gostartagent | 2 +- 2 files changed, 4 insertions(+), 1 deletion(-) -- Alioth's /srv/git/_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goserver.git

1 1

[x2godesktopsharing] branch master updated (4764a2a -> c9e4818)
by git-admin＠x2go.org 01 Nov '14

01 Nov '14

This is an automated email from the git hooks/post-receive script. x2go pushed a change to branch master in repository x2godesktopsharing. from 4764a2a fix for last commit (as it broke X2Go Client) new c9e4818 Change in desktop sharing startup. We have to be able to extend the number of session parameters in x2gostartagent (we added the clipboard field recently). So, relevant informtion for x2godesktopsharing needs to be listed first, then the unimportant options (for desktop sharing). Moving the $USER variable to the front then... The 1 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "adds" were already present in the repository and have only been added to this reference. Summary of changes: debian/changelog | 6 ++++++ sharetray.cpp | 10 +++++----- 2 files changed, 11 insertions(+), 5 deletions(-) -- Alioth's /srv/git/_hooks_/post-receive-email on /srv/git/code.x2go.org/x2godesktopsharing.git

1 1

[x2godesktopsharing] branch master updated (16cfb73 -> 4764a2a)
by git-admin＠x2go.org 01 Nov '14

01 Nov '14

This is an automated email from the git hooks/post-receive script. x2go pushed a change to branch master in repository x2godesktopsharing. from 16cfb73 Provide debug output when we DENY session startup. new fa9e1e0 debian/control: Raise versioned D (x2godesktopsharing): x2goserver (>= 4.0.1.19). new 4764a2a fix for last commit (as it broke X2Go Client) The 2 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "adds" were already present in the repository and have only been added to this reference. Summary of changes: debian/changelog | 2 ++ sharetray.cpp | 8 ++++---- 2 files changed, 6 insertions(+), 4 deletions(-) -- Alioth's /srv/git/_hooks_/post-receive-email on /srv/git/code.x2go.org/x2godesktopsharing.git

1 2

[x2goserver] branch master updated (1dafed6 -> b003d37)
by git-admin＠x2go.org 01 Nov '14

01 Nov '14

This is an automated email from the git hooks/post-receive script. x2go pushed a change to branch master in repository x2goserver. from 1dafed6 Add to BR: findutils. new 0efd3d8 Accept more verbose "DENY" output from x2godesktopsharing. new b003d37 improve last commit The 2 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "adds" were already present in the repository and have only been added to this reference. Summary of changes: debian/changelog | 1 + x2goserver/bin/x2gostartagent | 3 ++- 2 files changed, 3 insertions(+), 1 deletion(-) -- Alioth's /srv/git/_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goserver.git

1 2

[x2goserver] branch release/4.0.1.x updated (619ad6e -> 2aa4556)
by git-admin＠x2go.org 01 Nov '14

01 Nov '14

This is an automated email from the git hooks/post-receive script. x2go pushed a change to branch release/4.0.1.x in repository x2goserver. from 619ad6e Accept more verbose "DENY" output from x2godesktopsharing. new 2aa4556 improve last commit The 1 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "adds" were already present in the repository and have only been added to this reference. Summary of changes: x2goserver/bin/x2gostartagent | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) -- Alioth's /srv/git/_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goserver.git

1 1

[x2godesktopsharing] branch master updated (56b579f -> 16cfb73)
by git-admin＠x2go.org 01 Nov '14

01 Nov '14

This is an automated email from the git hooks/post-receive script. x2go pushed a change to branch master in repository x2godesktopsharing. from 56b579f Own directories that we put files in. new ac3dfad fix upstream version string new 16cfb73 Provide debug output when we DENY session startup. The 2 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "adds" were already present in the repository and have only been added to this reference. Summary of changes: debian/changelog | 1 + sharetray.cpp | 10 +++++----- 2 files changed, 6 insertions(+), 5 deletions(-) -- Alioth's /srv/git/_hooks_/post-receive-email on /srv/git/code.x2go.org/x2godesktopsharing.git

1 2

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

x2go-commits