X2Go Bug report logs - #1600
Filter ACPI events

version graph

Package: x2goserver; Maintainer for x2goserver is X2Go Developers <x2go-dev@lists.x2go.org>; Source for x2goserver is src:x2goserver.

Reported by: Yetoo <yetoohappy@gmail.com>

Date: Tue, 25 Apr 2023 17:30:01 UTC

Severity: critical

Found in version 4.1.0.3-5

Reply or subscribe to this bug.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to x2go-dev@lists.x2go.org, X2Go Developers <x2go-dev@lists.x2go.org>:
Bug#1600; Package x2goserver. (Tue, 25 Apr 2023 17:30:01 GMT) (full text, mbox, link).


Acknowledgement sent to Yetoo <yetoohappy@gmail.com>:
New Bug report received and forwarded. Copy sent to X2Go Developers <x2go-dev@lists.x2go.org>. (Tue, 25 Apr 2023 17:30:02 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.x2go.org (full text, mbox, reply):

From: Yetoo <yetoohappy@gmail.com>
To: submit@bugs.x2go.org
Subject: Filter ACPI events
Date: Tue, 25 Apr 2023 10:28:14 -0700
Package: x2goserver
Version: 4.1.0.3-5
Severity: Critical

I have x2goclient installed on local Fedora 37 machine and
x2goserver/x2godesktopsharing installed on remote Debian 11 and
(different) Fedora 37 machines. On the Fedora 37 local machine I
connected to the Fedora 37 remote machine in X2go/X11 Desktop Sharing
mode with fullscreen and press the power button on the local machine.
This causes the Fedora 37 remote machine to respond to the shutdown
command as configured and, in this instance, shutdown. I tested with a
Debian 11 remote machine with x2goserver/x2godesktopsharing installed
on it and it too responded to the shutdown acpi command. Both remote
machines have xfce4 desktop installed.

I expect the server to at least discard ACPI events and not depend on
a client to not send ACPI events. For thin client users expecting the
machine to be separate from the software in the remote connection this
increases chance of unintentional user error messing up data or even
malicious abuse.

Client packages:
x2goclient 4.1.2.2-7.f37
Package nx-libs 3.5.99.26-5.fc37
Package nxproxy 3.5.99.26-5.fc37

Debian 11 remote/Server packages:
x2goserver 4.1.0.3-5

Fedora 37 remote/Server packages:
x2goserver-4.1.0.3-19.fc37


Send a report that this bug log contains spam.


X2Go Developers <owner@bugs.x2go.org>. Last modified: Sat Mar 2 23:10:53 2024; Machine Name: ymir.das-netzwerkteam.de

X2Go Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.