[X2go-Dev] x2goserver package with setuidwrapper

[Mike Gabriel]

Hi Morty, hi Reinhard,

On Mo 18 Jul 2011 17:53:34 CEST Moritz Struebe wrote:

> On 2011-07-18 17:40, Reinhard Tartler wrote:
>>> > Then we should also make sure, no one can su to the x2gouser,  shouldn't
>>> > we? Or at least make sure that x2gouser cannot change  permissions on
>>> > that file? How that?
>> Something like this should do it:
>>
>> -r-sr-sr-x 1 x2gouser x2gousers  5388 2011-07-18 00:12  
>> /usr/bin/x2gosqlitewrapper*
>> -rwxr-xr-x 1 root     root      10094 2011-07-18 00:02  
>> /usr/lib/x2go/x2gosqlitewrapper.pl*
>
> Hmm, but can't the x2gouser chmod /usr/bin/x2gosqlitewrapper? Ok, we
> should really consult arw who already went through this in detail.... :/
>
> Morty

Morty is right in this point a file with

   6555 x2gouser:x2gousers

can be set to 6755 (or any other) by user x2gouser.

Mike

-- 

DAS-NETZWERKTEAM
mike gabriel, dorfstr. 27, 24245 barmissen
fon: +49 (4302) 281418, fax: +49 (4302) 281419

GnuPG Key ID 0xB588399B
mail: mike.gabriel at das-netzwerkteam.de, http://das-netzwerkteam.de

freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 490 bytes
Desc: Digitale PGP-Unterschrift
URL: <http://lists.x2go.org/pipermail/x2go-dev/attachments/20110718/c6fade64/attachment.pgp>