[X2Go-Dev] Published Applications

[Moritz Struebe]

On 2012-04-20 16:21, Mike Gabriel wrote:
>
> On Fr 20 Apr 2012 15:59:27 CEST Moritz Struebe wrote:
>
>> On 2012-04-20 13:57, Vasilica Petcu wrote:
>>> 2) User access to only "published applications" can be achieved only
>>> if it doesn't exist a Desktop Environment...
>>
>> No, no and no. x2go is just like "ssh -X". You can't do restrict
>> anything you can't restrict with "ssh -x". There are tool kits that
>> allow to do that, but x2go - opposed to the nx-approach - can not do
>> that - and is still more secure (I won't explain why, because that needs
>> quite a bit insight on how security in linux works).
>
> Maybe a misunderstanding here...
>
> If I hear Vasilica correctly: uninstall GNOME, KDE, LXDE, etc. and you
> won't be able to launch desktop sessions. This is indeed correct! 

He said "User access to only "published applications" " and this is
wrong. I can start any application I wish. And even if there is some
kind of restriction I can still start a second SSH and start any
application by redirecting X to the already established x2go connection.

Morty

-- 
Dipl.-Ing. Moritz 'Morty' Struebe (Wissenschaftlicher Mitarbeiter)
Lehrstuhl für Informatik 4 (Verteilte Systeme und Betriebssysteme)
Friedrich-Alexander-Universität Erlangen-Nürnberg
Martensstr. 1
91058 Erlangen

Tel   : +49 9131 85-25419
Fax   : +49 9131 85-28732
eMail : struebe at informatik.uni-erlangen.de
WWW   : http://www4.informatik.uni-erlangen.de/~morty




-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4992 bytes
Desc: S/MIME Kryptografische Unterschrift
URL: <http://lists.x2go.org/pipermail/x2go-dev/attachments/20120420/e8475dd4/attachment.bin>