2 Aug
2011
2 Aug
'11
2:46 p.m.
On Tue, Aug 02, 2011 at 15:41:55 (CEST), Mike Gabriel wrote:
Hi Morty,
On Di 02 Aug 2011 15:28:57 CEST Moritz Struebe wrote:
What is the rationale for the extra group? Is there a good reason for disallowing someone to share his/her desktop?
the desktopsharing is a tricky feature anyway as it grants many ways for a user who is allowed to share another's desktop to manipulate the user profile.
This sounds to me as desktop sharing was a somewhat insecure feature anyway. In this case, why do you rely on a system group instead of for instance maintaining a /etc/x2go/allowdesktopshareing.users file that contains all users that are allowed to use the feature?
-- Gruesse/greetings, Reinhard Tartler, KeyID 945348A4