On 2012-04-20 16:21, Mike Gabriel wrote:
On Fr 20 Apr 2012 15:59:27 CEST Moritz Struebe wrote:
On 2012-04-20 13:57, Vasilica Petcu wrote:
- User access to only "published applications" can be achieved only if it doesn't exist a Desktop Environment...
No, no and no. x2go is just like "ssh -X". You can't do restrict anything you can't restrict with "ssh -x". There are tool kits that allow to do that, but x2go - opposed to the nx-approach - can not do that - and is still more secure (I won't explain why, because that needs quite a bit insight on how security in linux works).
Maybe a misunderstanding here...
If I hear Vasilica correctly: uninstall GNOME, KDE, LXDE, etc. and you won't be able to launch desktop sessions. This is indeed correct!
He said "User access to only "published applications" " and this is wrong. I can start any application I wish. And even if there is some kind of restriction I can still start a second SSH and start any application by redirecting X to the already established x2go connection.
Morty
-- Dipl.-Ing. Moritz 'Morty' Struebe (Wissenschaftlicher Mitarbeiter) Lehrstuhl für Informatik 4 (Verteilte Systeme und Betriebssysteme) Friedrich-Alexander-Universität Erlangen-Nürnberg Martensstr. 1 91058 Erlangen
Tel : +49 9131 85-25419 Fax : +49 9131 85-28732 eMail : struebe@informatik.uni-erlangen.de WWW : http://www4.informatik.uni-erlangen.de/~morty