[X2Go-Dev] Bug#287: Bug#287: x2goserver allows to connect to ALL X server sessions by default

[Stefan Baur]

Am 17.08.2013 21:23, schrieb Mike Gabriel:
>> I'd still vote for adding a check + warning to X2Go.
>> Even if this brain-dead setup that is rolled out by Linux Mint isn't
>> the default in other distros, someone might set "xhost +" somewhere,
>> sometime, and totally forget about it.
>> A reminder/warning "Hey, you're running X2Go on a host that hast
>> 'xhost +' set, this is a really bad idea", followed by a short
>> explanation, would make sense, IMO.
>
> Any patch is welcome (on the other hand). But do not introduce a daemon
> that checks .Xauthority every five seconds ;-)...

/me now silently deletes his draft that contained "while true" and "sleep 5"

Seriously, you know coding isn't my strong side.  So all I can do is 
suggest that someone adds this feature.  My suggestion would be to check 
it either during installation/upgrade of the x2go server package, or 
each time a user connects.
The latter would make more sense, IMHO, but I don't know what the 
performance penalty would be.

-Stefan