This is an automated email from the git hooks/post-receive script. x2go pushed a change to branch master in repository x2goserver. from 142c50d Legacy for applications (and X2Go scripts) that expect $SSH_CLIENT to be set in the X2Go session's environment. (Fixes: #644). new 1f5a767 Add man page for x2gogetapps. Weave into that a security / disclaimer message as proposed by Stefan Baur. (Fixes: #728). The 1 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "adds" were already present in the repository and have only been added to this reference. Summary of changes: debian/changelog | 2 ++ x2goserver/man/man8/x2gogetapps.8 | 58 +++++++++++++++++++++++++++++++++++++ 2 files changed, 60 insertions(+) create mode 100644 x2goserver/man/man8/x2gogetapps.8 -- Alioth's /srv/git/_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goserver.git
This is an automated email from the git hooks/post-receive script. x2go pushed a commit to branch master in repository x2goserver. commit 1f5a767bdff4ab422e1092a0f775927be05ecc2c Author: Mike Gabriel <mike.gabriel@das-netzwerkteam.de> Date: Thu Feb 5 12:41:58 2015 +0100 Add man page for x2gogetapps. Weave into that a security / disclaimer message as proposed by Stefan Baur. (Fixes: #728). --- debian/changelog | 2 ++ x2goserver/man/man8/x2gogetapps.8 | 58 +++++++++++++++++++++++++++++++++++++ 2 files changed, 60 insertions(+) diff --git a/debian/changelog b/debian/changelog index d62e2d7..b440a13 100644 --- a/debian/changelog +++ b/debian/changelog @@ -226,6 +226,8 @@ x2goserver (4.0.1.19-0x2go1) UNRELEASED; urgency=medium that. Works around a too-old DBD::SQLite package on SLE 11.x. - Legacy for applications (and X2Go scripts) that expect $SSH_CLIENT to be set in the X2Go session's environment. (Fixes: #644). + - Add man page for x2gogetapps. Weave into that a security / disclaimer + message as proposed by Stefan Baur. (Fixes: #728). * debian/control: + Add D (x2goserver): libfile-which-perl. + Add C (x2goserver: x2godesktopsharing (<< 3.1.1.2-0~). (Fixes: #700). diff --git a/x2goserver/man/man8/x2gogetapps.8 b/x2goserver/man/man8/x2gogetapps.8 new file mode 100644 index 0000000..9739fc4 --- /dev/null +++ b/x2goserver/man/man8/x2gogetapps.8 @@ -0,0 +1,58 @@ +'\" -*- coding: utf-8 -*- +.if \n(.g .ds T< \\FC +.if \n(.g .ds T> \\F[\n[.fam]] +.de URL +\\$2 \(la\\$1\(ra\\$3 +.. +.if \n(.g .mso www.tmac +.TH x2gogetapps 8 "Feb 2015" "Version 4.1.0.0-preview" "X2Go Server Tool" +.SH NAME +x2gogetapps \- Generate list of Published Applications +.SH SYNOPSIS +'nh +.fi +.ad l +x2gogetapps + +.SH DESCRIPTION +\fBx2gogetapps\fR returns a machine-readable list of X2Go Published Applications. +This command is evoked from connected X2Go client applications. +.PP +\fBx2gogetapps\fR is run with normal user privileges. + +.SH RETURN VALUES +\fBx2gogetapps\fR returns one or multiple items in the below format: + + <icon> + [ ... base64 encoded image information ...] + </icon> + <desktop> + [ ... selected fields form .desktop file ... ] + </desktop> + ... + +As exitcode \fBx2gogetapps\fR always returns 0. + +.SH SECURITY INFORMATION / DISCLAIMER +Users are advised to not misinterpret X2GoServer's Published Application +Mode as a security feature. +.PP +Even when using Published Application Mode, it is still possible for +users to locally configure an X2Go Client with any setting they want, and +use that to connect. +.PP +So if you're trying to keep users from running a +certain application on the host, using Published Application Mode to +"lock" the configuration is the *wrong* way. The users will still be +able to run that application by creating their own, local configuration +file and using that. +.PP +To keep users from running an application on the +server, you have to use *filesystem permissions*. In the simplest case, +this means setting chmod 750 or 550 on the particular application on the +host, and making sure the users in question are not the owner and also +not a member of the group specified for the application. + +.SH AUTHOR +This manual has been written by Mike Gabriel <mike.gabriel@das-netzwerkteam.de> for the X2Go project +(http://www.x2go.org). -- Alioth's /srv/git/_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goserver.git