[X2Go-Commits] [live-build-x2go] 01/04: added x11vnc startup, commented out, with a note how stupid it is

[git-admin at x2go.org]

This is an automated email from the git hooks/post-receive script.

x2go pushed a commit to branch mini
in repository live-build-x2go.

commit bd72a61c9ec32036c2aa790928a3c857546a15fb
Author: Stefan Baur (BAUR-ITCS) <kontakt at baur-itcs.de>
Date:   Fri Aug 5 21:14:20 2016 +0200

    added x11vnc startup, commented out, with a note how stupid it is
---
 .../lib/live/config/2800-x2go-thinclientconfig     | 23 ++++++++++++++++++++++
 1 file changed, 23 insertions(+)

diff --git a/config/includes.chroot/lib/live/config/2800-x2go-thinclientconfig b/config/includes.chroot/lib/live/config/2800-x2go-thinclientconfig
index 6efdc18..01950a9 100755
--- a/config/includes.chroot/lib/live/config/2800-x2go-thinclientconfig
+++ b/config/includes.chroot/lib/live/config/2800-x2go-thinclientconfig
@@ -38,6 +38,29 @@ LDAP2=\$(cat /proc/cmdline | \
 	    sed 's/^ldap2=/ldap2#/' | \
 	    awk -F'#' ' /^ldap2#/ { print \$2 }')
 
+# Spawn x11vnc
+# x11vnc -wait 50 -passwd PASSWORD -forever -loop -display :0 -o /var/log/x11vnc.log &
+# 
+# This runs as user, so cannot write to /var/log - thus you should use this instead:
+# x11vnc -wait 50 -passwd PASSWORD -forever -loop -display :0 &
+# 
+# Spawning x11vnc here is a really, really dumb idea, as VNC has no way of using
+# a public/private key pair, only passwords - and these must be stored in plain
+# text somewhere, in a place that is actually world-readable. 
+#
+# /!\ This is about as dumb as shouting your root password in a room full of strangers! /!\
+#
+# A much, much better, safer and saner way to handle this is to enable the
+# SSH daemon on the thinclient, supply it with an authorized_keys file containing
+# a public key, and spawning x11vnc on demand after logging in - binding it to
+# localhost only, and forwarding the port through your SSH connection.
+#
+# In short, run this on your local admin workstation:
+# ssh -t -L 5900:localhost:5900 name_or_ip_of_thinclient 'x11vnc -localhost -display :0'
+# and while this connection is active, run:
+# vncviewer localhost:0
+
+
 # Spawn X2GoClient
 if [ -n "\$BROKERURL" ]; then
 	SESSIONFROM="--broker-url=\$BROKERURL"

--
Alioth's /home/x2go-admin/maintenancescripts/git/hooks/post-receive-email on /srv/git/code.x2go.org/live-build-x2go.git