Hi I have installed x2go on one of the servers we are monitoring, found that x2go allows copy paste on it's session, this is a threat to the data security , how can i disable copy/paste on x2go server, waiting for your response , immediate help will be appreciated Thanks and Regards Ranjith KiranLinux engineerTechnomics IT Solutions Pvt LTDwww.technomicssolutions.com
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
Am 23.04.2015 um 23:13 schrieb Ranjith Technomics:
I have installed x2go on one of the servers we are monitoring, found that x2go allows copy paste on it's session, this is a threat to the data security , how can i disable copy/paste on x2go server, waiting for your response , immediate help will be appreciated
At present, this is a client-side setting, not a server-side one. Also, if someone can view the data, they can take screenshots. And a malicious software on the client can send keystrokes pretending to be the user. So even if you block copy/paste on the clipboard, there are still ways to do evil things. Keep that in mind.
- -Stefan
BAUR-ITCS UG (haftungsbeschränkt) Geschäftsführer: Stefan Baur Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364 Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2
iQEcBAEBCAAGBQJVOWFDAAoJEG7d9BjNvlEZIucH/1meztZJQEZ2zvN3bS/cSf3N VuuABCYJUS0riqH9OqqSR2L8t+YPqmHwXtasGmPxYYI4NnUn11XSQ0bZi+OYfTAO TqtXJfTIjg8/6ckRWzFkKE1+FrgjfPMICXbsIdr6fPHSgrEzlZKUXHvmB9VNslAi js0xu2JYjhuhAmjppNrReWAuqdE/FuXirlJtFNQErjNB0r/+LDJpqCIH65Synpu7 It2pKqv0CRGscyNx6ll+3UMW1MSPcXegeWunLdHJlPuWrTnbiWf1U7lsTdFYkWqz siVsP0KQzZ0heTROvLCBFH38cS2XSC2DGEhKFpzTYGPq9cweQcxkJiuuFUr+mV4= =Sy2n -----END PGP SIGNATURE-----
Hi,
On Do 23 Apr 2015 23:13:37 CEST, Ranjith Technomics wrote:
Hi I have installed x2go on one of the servers we are monitoring, found
that x2go allows copy paste on it's session, this is a threat to the
data security , how can i disable copy/paste on x2go server, waiting
for your response , immediate help will be appreciated Thanks and Regards Ranjith KiranLinux engineerTechnomics IT Solutions Pvt
LTDwww.technomicssolutions.com
Copy+paste can be (a) disabled in the session profile settings of the
X2Go Client application (client-side protection).
Server-side, this can be fully overridden (and server-side always
wins) by setting the copy+paste mode in
/etc/x2go/x2goagent.options
light+love, Mike
DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148
GnuPG Key ID 0x25771B31 mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de
freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xf...
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
Am 24.04.2015 um 13:20 schrieb Mike Gabriel:
Copy+paste can be (a) disabled in the session profile settings of the X2Go Client application (client-side protection).
Server-side, this can be fully overridden (and server-side always wins) by setting the copy+paste mode in
/etc/x2go/x2goagent.options
Oh, cool, I wasn't aware of that. *tagging this reply for re-use in a Wiki page*
- -Stefan
BAUR-ITCS UG (haftungsbeschränkt) Geschäftsführer: Stefan Baur Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364 Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2
iQEcBAEBCAAGBQJVOieEAAoJEG7d9BjNvlEZX/wH/10ARchjEvkCTt+5siOA7Geo McqqPBPmS1gmSG+pqxYdbt+RT1vTh3fzJjKUws+15Z97/Qy3K/09jYHdPZTpQU1I aYT9huALgZ+6wVbM8SZZaMOKV5gV6lud/sD6GDiuKHNJSYLS9NcRBwl3iOmVi/FJ 8pORxqZWmH5hlWrYPbMk70kAr9VKvNPj+xecZjCyDJ1ldit/R9byaEdoh4s6dikl mcFtSXLI1YC0X6dQxLA5mfNVyHDPjbVeba8PS7qjJ9sFR5DkVvDR4WlKqdfhDjMB TVcvS5f9/z8dNzvToiefc82eUaVrvdllWarkGoqnGZAx/U0TBes3N3fnd40kVKc= =m+WF -----END PGP SIGNATURE-----
-
Mike Gabriel -
Ranjith Technomics -
Stefan Baur