[X2go-dev] x2go security Issues

Mike Gabriel mike.gabriel at das-netzwerkteam.de
Fri Jan 21 12:02:53 CET 2011


Hi Morty,

On Fr 21 Jan 2011 09:21:37 CET Moritz Struebe wrote:

> I didn't test them, but I also saw similar checks around fuse, sound  
> and printing, I think.

In case of x2goprint: if a user is not allowed to use x2goprint, there  
are still spool jobs created which cram the server hard disk... So I  
thought it better, to avoid this behaviour via a client control.

I also check the group memberships to report failures properly and to  
reduce unnecessary SSH port forwarding...

But YES: actually we need a server command that return available  
features and functions for a specific user...

Greets,
Mike

-- 

DAS-NETZWERKTEAM
mike gabriel, dorfstr. 27, 24245 barmissen
fon: +49 (4302) 281418, fax: +49 (4302) 281419

GnuPG Key ID 0xB588399B
mail: mike.gabriel at das-netzwerkteam.de, http://das-netzwerkteam.de

freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 489 bytes
Desc: Digitale PGP-Unterschrift
URL: <http://lists.x2go.org/pipermail/x2go-dev/attachments/20110121/33682997/attachment.pgp>


More information about the x2go-dev mailing list