-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Am 07.01.2015 um 04:32 schrieb Stefan Baur:
Am 07.01.2015 um 04:27 schrieb Robert Dinse:
For what it's worth I installed the packages for Ubuntu on Mint and it is working. Have I introduced a grave security problem?
Maybe, maybe not. Read through the bug description, try to reproduce the issue, check for the presence of that /etc/xdg/autostart/mint-xhost-plus.desktop file and its content.
Addendum: the easiest way to check whether security is currently enabled is to log on as a regular user, and run "xhost" (without the quotes, and without any parameters) in an xterm.
In my case (Debian Wheezy, not Mint), it replies with:
access control enabled, only authorized clients can connect SI:localuser:MYUSERNAMEHERE
And your output, if you're safe, should look similar.
If the first line, however, reads
access control disabled, clients can connect from any host
then you have an issue. A serious one.
- -Stefan
BAUR-ITCS UG (haftungsbeschränkt) Geschäftsführer: Stefan Baur Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364 Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32)
iQEcBAEBAgAGBQJUrK3UAAoJEG7d9BjNvlEZuNwIAJ64IvgKjPtbehQNKmelfdrq nUcGfI2/FsjSQYecOA7uj0KeeXmToXj7k3jkb4905JQC4jEU+xRvwm0zi/y8MsdI hUcV1YmEWohG61waLnIuS584yDmqmRIgLtAlYvUUocd+YYAnIbyVmLgSSfPzU4tR xGyksZ8/a4Zgv4t4Ep4Zwi42UJ2Tq0QhNwjTmRios9IcCmKmQY4xtddaxjfnyrQZ MxmPLON2bcy1ZpkMKn+KSMH9kkAW4E+epYrdwnQMo52S/XbgsytuKSJxKXsFSCQS rHt3HHWc/BFLGS9Jd6aPASEJg+oTI4adrYgnxPg5ZhgQJ196hbcQGyA9snJzUiE= =s458 -----END PGP SIGNATURE-----