This is an automated email from the git hooks/post-receive script. x2go pushed a commit to branch master in repository x2goserver. commit 1f5a767bdff4ab422e1092a0f775927be05ecc2c Author: Mike Gabriel <mike.gabriel@das-netzwerkteam.de> Date: Thu Feb 5 12:41:58 2015 +0100 Add man page for x2gogetapps. Weave into that a security / disclaimer message as proposed by Stefan Baur. (Fixes: #728). --- debian/changelog | 2 ++ x2goserver/man/man8/x2gogetapps.8 | 58 +++++++++++++++++++++++++++++++++++++ 2 files changed, 60 insertions(+) diff --git a/debian/changelog b/debian/changelog index d62e2d7..b440a13 100644 --- a/debian/changelog +++ b/debian/changelog @@ -226,6 +226,8 @@ x2goserver (4.0.1.19-0x2go1) UNRELEASED; urgency=medium that. Works around a too-old DBD::SQLite package on SLE 11.x. - Legacy for applications (and X2Go scripts) that expect $SSH_CLIENT to be set in the X2Go session's environment. (Fixes: #644). + - Add man page for x2gogetapps. Weave into that a security / disclaimer + message as proposed by Stefan Baur. (Fixes: #728). * debian/control: + Add D (x2goserver): libfile-which-perl. + Add C (x2goserver: x2godesktopsharing (<< 3.1.1.2-0~). (Fixes: #700). diff --git a/x2goserver/man/man8/x2gogetapps.8 b/x2goserver/man/man8/x2gogetapps.8 new file mode 100644 index 0000000..9739fc4 --- /dev/null +++ b/x2goserver/man/man8/x2gogetapps.8 @@ -0,0 +1,58 @@ +'\" -*- coding: utf-8 -*- +.if \n(.g .ds T< \\FC +.if \n(.g .ds T> \\F[\n[.fam]] +.de URL +\\$2 \(la\\$1\(ra\\$3 +.. +.if \n(.g .mso www.tmac +.TH x2gogetapps 8 "Feb 2015" "Version 4.1.0.0-preview" "X2Go Server Tool" +.SH NAME +x2gogetapps \- Generate list of Published Applications +.SH SYNOPSIS +'nh +.fi +.ad l +x2gogetapps + +.SH DESCRIPTION +\fBx2gogetapps\fR returns a machine-readable list of X2Go Published Applications. +This command is evoked from connected X2Go client applications. +.PP +\fBx2gogetapps\fR is run with normal user privileges. + +.SH RETURN VALUES +\fBx2gogetapps\fR returns one or multiple items in the below format: + + <icon> + [ ... base64 encoded image information ...] + </icon> + <desktop> + [ ... selected fields form .desktop file ... ] + </desktop> + ... + +As exitcode \fBx2gogetapps\fR always returns 0. + +.SH SECURITY INFORMATION / DISCLAIMER +Users are advised to not misinterpret X2GoServer's Published Application +Mode as a security feature. +.PP +Even when using Published Application Mode, it is still possible for +users to locally configure an X2Go Client with any setting they want, and +use that to connect. +.PP +So if you're trying to keep users from running a +certain application on the host, using Published Application Mode to +"lock" the configuration is the *wrong* way. The users will still be +able to run that application by creating their own, local configuration +file and using that. +.PP +To keep users from running an application on the +server, you have to use *filesystem permissions*. In the simplest case, +this means setting chmod 750 or 550 on the particular application on the +host, and making sure the users in question are not the owner and also +not a member of the group specified for the application. + +.SH AUTHOR +This manual has been written by Mike Gabriel <mike.gabriel@das-netzwerkteam.de> for the X2Go project +(http://www.x2go.org). -- Alioth's /srv/git/_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goserver.git