[X2Go-Dev] Bug#287: Bug#287: x2goserver allows to connect to ALL X server sessions by default
Stefan Baur
newsgroups.mail2 at stefanbaur.de
Sat Aug 17 21:09:02 CEST 2013
Am 17.08.2013 20:42, schrieb Mike Gabriel:
>
>> Or maybe a warning should be issued if "xhost" is set to + when a user
>> connect?
>
> Nope! In default setups no other distro evokes xhost + on session
> startup. This is just insane!!! So we ignore this issue in X2Go upstream
> completely.
I'd still vote for adding a check + warning to X2Go.
Even if this brain-dead setup that is rolled out by Linux Mint isn't the
default in other distros, someone might set "xhost +" somewhere,
sometime, and totally forget about it.
A reminder/warning "Hey, you're running X2Go on a host that hast 'xhost
+' set, this is a really bad idea", followed by a short explanation,
would make sense, IMO.
-Stefan
More information about the x2go-dev
mailing list