x2go-commits

x2go-commits@lists.x2go.org

1 participants
37910 discussions

[x2goclient] branch master updated (d5351dd -> 0b0f880)
by git-admin＠x2go.org 27 Oct '14

27 Oct '14

This is an automated email from the git hooks/post-receive script. x2go pushed a change to branch master in repository x2goclient. from d5351dd fix for last commit new 0b0f880 man page: grammar fix The 1 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "adds" were already present in the repository and have only been added to this reference. Summary of changes: man/man1/x2goclient.1 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) -- Alioth's /srv/git/_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goclient.git

1 1

page changed: events:x2go-gathering-2014
by wiki-admin＠x2go.org 27 Oct '14

27 Oct '14

A page in your DokuWiki was added or changed. Here are the details: Date : 2014/10/27 02:01 Browser : Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Firefox/31.0 IP-Address : 188.105.121.242 Hostname : dslb-188-105-121-242.188.105.pools.vodafone-ip.de Old Revision: http://wiki.x2go.org/doku.php/events:x2go-gathering-2014?rev=1414358930 New Revision: http://wiki.x2go.org/doku.php/events:x2go-gathering-2014 Edit Summary: [Sunday 2014-11-02] User : stefanbaur @@ -105,9 +105,9 @@ ==== Sunday 2014-11-02 ==== ^time slot ^ Topic ^ Speaker / Moderator ^ Comment ^ | 09.00h | Breakfast (until 10.00h) | <all> | ROOMS MUST BE CLEANED OF TRASH AND CLEARED OF YOUR PERSONAL BELONGINGS BY 1000 hours/10am local time! | - | 10.00h | <open slot> ||| + | 10.00h | Video recording session showing all production-ready X2Go features? | //Stefan Baur, ...// | The plan is to upload this to YouTube later on | | 10.45h | Future organizational structure of the X2Go project | //Heinz-Markus Graesing// and //Mike Gabriel// | Open Discussion | | 11.30h | 20min break | //Stefan Baur// | order pizza for arrival at 12.45h | | 11.50h | <open slot> ||| | 12.35h | short lunch break | <all>| option to have ordered pizza | -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page changed: events:x2go-gathering-2014
by wiki-admin＠x2go.org 26 Oct '14

26 Oct '14

A page in your DokuWiki was added or changed. Here are the details: Date : 2014/10/26 21:28 Browser : Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Firefox/31.0 IP-Address : 78.43.170.197 Hostname : HSI-KBW-078-043-170-197.hsi4.kabel-badenwuerttemberg.de Old Revision: http://wiki.x2go.org/doku.php/events:x2go-gathering-2014?rev=1414358907 New Revision: http://wiki.x2go.org/doku.php/events:x2go-gathering-2014 Edit Summary: [Info for train travellers] User : stefanbaur @@ -149,9 +149,9 @@ ==== Info for plane travellers ==== * **Attention: Lufthansa and Germanwings are suffering from intermittent strikes by the pilots' union! Avoid using these airlines until further notice!** ==== Info for train travellers ==== - * <del>**Attention: German Rail (Deutsche Bahn) is suffering from intermittent strikes by the train operators' union! Avoid using trains until further notice!**</del> The union has released a statement that no strikes are scheduled until November 2nd, 23:59/11:59pm. So taking the train to X2Go: The Gathering 2014 and back should be possible. + * <del>**Attention: German Rail (Deutsche Bahn) is suffering from intermittent strikes by the train operators' union! Avoid using trains until further notice!**</del> The union has released a statement that no strikes are scheduled until November 2nd, 23:59/11:59pm. So taking the train to //X2Go: The Gathering 2014// and back should be possible. * The nearest subway station is "Essen-Horst" * This subway line is operated by Deutsche Bahn, so you can book your railway ticket to destination Essen-Horst and have the subway ticket included in your regular train ticket. Advantage: no need to figure out how the local ticket vending machine works (plus it's probably cheaper that way). * It's a ~ 15 Minute walk from Essen-Horst to the Linuxhotel, please use the route as suggested here: http://goo.gl/maps/wJWrv * NB: some navigation systems plot a shorter pedestrian route that leads through the woods, but from personal experience I (Stefan) can tell you that you do not want to use that path when carrying luggage, possibly in the dark, when you've never walked it before. -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page changed: events:x2go-gathering-2014
by wiki-admin＠x2go.org 26 Oct '14

26 Oct '14

A page in your DokuWiki was added or changed. Here are the details: Date : 2014/10/26 21:28 Browser : Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Firefox/31.0 IP-Address : 78.43.170.197 Hostname : HSI-KBW-078-043-170-197.hsi4.kabel-badenwuerttemberg.de Old Revision: http://wiki.x2go.org/doku.php/events:x2go-gathering-2014?rev=1414279167 New Revision: http://wiki.x2go.org/doku.php/events:x2go-gathering-2014 Edit Summary: [Info for train travellers] User : stefanbaur @@ -149,9 +149,9 @@ ==== Info for plane travellers ==== * **Attention: Lufthansa and Germanwings are suffering from intermittent strikes by the pilots' union! Avoid using these airlines until further notice!** ==== Info for train travellers ==== - * **Attention: German Rail (Deutsche Bahn) is suffering from intermittent strikes by the train operators' union! Avoid using trains until further notice!** + * <del>**Attention: German Rail (Deutsche Bahn) is suffering from intermittent strikes by the train operators' union! Avoid using trains until further notice!**</del> The union has released a statement that no strikes are scheduled until November 2nd, 23:59/11:59pm. So taking the train to X2Go: The Gathering 2014 and back should be possible. * The nearest subway station is "Essen-Horst" * This subway line is operated by Deutsche Bahn, so you can book your railway ticket to destination Essen-Horst and have the subway ticket included in your regular train ticket. Advantage: no need to figure out how the local ticket vending machine works (plus it's probably cheaper that way). * It's a ~ 15 Minute walk from Essen-Horst to the Linuxhotel, please use the route as suggested here: http://goo.gl/maps/wJWrv * NB: some navigation systems plot a shorter pedestrian route that leads through the woods, but from personal experience I (Stefan) can tell you that you do not want to use that path when carrying luggage, possibly in the dark, when you've never walked it before. -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

[x2goclient] branch master updated (c95be05 -> d5351dd)
by git-admin＠x2go.org 26 Oct '14

26 Oct '14

This is an automated email from the git hooks/post-receive script. x2go pushed a change to branch master in repository x2goclient. from c95be05 Make sound options configurable via X2Go Session Broker. (Fixes: #652). new d5351dd fix for last commit The 1 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "adds" were already present in the repository and have only been added to this reference. Summary of changes: onmainwindow.cpp | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) -- Alioth's /srv/git/_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goclient.git

1 1

page changed: wiki:security:rbash
by wiki-admin＠x2go.org 26 Oct '14

26 Oct '14

A page in your DokuWiki was added or changed. Here are the details: Date : 2014/10/26 18:49 Browser : Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/37.0.2062.120 Chrome/37.0.2062.120 Safari/537.36 IP-Address : 78.52.193.201 Hostname : f052193201.adsl.alicedsl.de Old Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash?rev=1414348921 New Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash Edit Summary: User : woglinde @@ -16,5 +16,19 @@ * no calls of binaries via complete path * no changes on the PATH variable are allowed But be aware, if rbash detects that a executebale is a shell-script it will be run with full bash. + This means if you are able to access the bash executebale via the PATH-variable (remind full path like /bin/bash are not allowed), + you can break out the rbash. + ====== Set rbash as default shell ====== + + Depending on the user setup, there are serval options to set the default shell for the users to rbash. + + ===== Set the shell with Samba ===== + For samba set the following parameter in the smb.conf: + <note important> template shell = /bin/rbash</note> + + + + + ====== secure ssh access ====== -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page changed: wiki:security:rbash
by wiki-admin＠x2go.org 26 Oct '14

26 Oct '14

A page in your DokuWiki was added or changed. Here are the details: Date : 2014/10/26 18:42 Browser : Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/37.0.2062.120 Chrome/37.0.2062.120 Safari/537.36 IP-Address : 78.52.193.201 Hostname : f052193201.adsl.alicedsl.de Old Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash?rev=1414348783 New Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash Edit Summary: [rbash short feature overview] User : woglinde @@ -15,6 +15,6 @@ * no redirections via > and >> are allowed * no calls of binaries via complete path * no changes on the PATH variable are allowed - But be aware, if rbash detects that a executebale is a shell-script it will disable all the feature + But be aware, if rbash detects that a executebale is a shell-script it will be run with full bash. -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page changed: wiki:security:rbash
by wiki-admin＠x2go.org 26 Oct '14

26 Oct '14

A page in your DokuWiki was added or changed. Here are the details: Date : 2014/10/26 18:39 Browser : Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/37.0.2062.120 Chrome/37.0.2062.120 Safari/537.36 IP-Address : 78.52.193.201 Hostname : f052193201.adsl.alicedsl.de Old Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash?rev=1414347428 New Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash Edit Summary: User : woglinde @@ -6,9 +6,9 @@ There are serval options to prevent the user doing it. One would be the use of selinux, but it is hard to understand and hard to setup correctly. Another option is the use of rbash, but with the current state of x2go-server there are serval steps so setup it up working correctly. - = rbash short feature overview = + ====== rbash short feature overview ====== rbash has some intressting features: * cd is disabled @@ -16,6 +16,5 @@ * no calls of binaries via complete path * no changes on the PATH variable are allowed But be aware, if rbash detects that a executebale is a shell-script it will disable all the feature - -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page changed: wiki:security:rbash
by wiki-admin＠x2go.org 26 Oct '14

26 Oct '14

A page in your DokuWiki was added or changed. Here are the details: Date : 2014/10/26 18:17 Browser : Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/37.0.2062.120 Chrome/37.0.2062.120 Safari/537.36 IP-Address : 78.52.193.201 Hostname : f052193201.adsl.alicedsl.de Old Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash?rev=1414347267 New Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash Edit Summary: User : woglinde @@ -10,12 +10,12 @@ = rbash short feature overview = rbash has some intressting features: - * cd is disabled - * no redirections via > and >> are allowed - * no calls of binaries via complete path - * no changes on the PATH variable are allowed + * cd is disabled + * no redirections via > and >> are allowed + * no calls of binaries via complete path + * no changes on the PATH variable are allowed But be aware, if rbash detects that a executebale is a shell-script it will disable all the feature -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page added: wiki:security:rbash
by wiki-admin＠x2go.org 26 Oct '14

26 Oct '14

A page in your DokuWiki was added or changed. Here are the details: Date : 2014/10/26 18:14 Browser : Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/37.0.2062.120 Chrome/37.0.2062.120 Safari/537.36 IP-Address : 78.52.193.201 Hostname : f052193201.adsl.alicedsl.de Old Revision: --- New Revision: http://wiki.x2go.org/doku.php/wiki:security:rbash Edit Summary: created User : woglinde The way x2go works, allows every user to get a ssh access to the x2go server. This can be a big problem when, you can not use the broker, to prevent certain actions on the server. The users can browse the x2go-server and have the access to nearly all directiores. There are serval options to prevent the user doing it. One would be the use of selinux, but it is hard to understand and hard to setup correctly. Another option is the use of rbash, but with the current state of x2go-server there are serval steps so setup it up working correctly. = rbash short feature overview = rbash has some intressting features: * cd is disabled * no redirections via > and >> are allowed * no calls of binaries via complete path * no changes on the PATH variable are allowed But be aware, if rbash detects that a executebale is a shell-script it will disable all the feature -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

x2go-commits