X2Go Bug report logs - #372
x2goadmin writes to users homes

Package: x2goserver; Maintainer for x2goserver is X2Go Developers <x2go-dev@lists.x2go.org>; Source for x2goserver is src:x2goserver.

Reported by: Reinhard Tartler <siretart@gmail.com>

Date: Sun, 15 Dec 2013 00:18:02 UTC

Severity: serious

Full log

🔗 View this message in rfc822 format

X-Loop: owner@bugs.x2go.org
Subject: Bug#372: [X2Go-Dev] Bug#372: x2goadmin writes to users homes
Reply-To: Reinhard Tartler <siretart@gmail.com>, 372@bugs.x2go.org
Resent-From: Reinhard Tartler <siretart@gmail.com>
Resent-To: x2go-dev@lists.berlios.de
Resent-CC: X2Go Developers <x2go-dev@lists.berlios.de>
X-Loop: owner@bugs.x2go.org
Resent-Date: Mon, 16 Dec 2013 12:48:02 +0000
Resent-Message-ID: <handler.372.B372.138719722214987@bugs.x2go.org>
Resent-Sender: owner@bugs.x2go.org
X-X2Go-PR-Message: followup 372
X-X2Go-PR-Package: x2goserver
X-X2Go-PR-Keywords: 
Received: via spool by 372-submit@bugs.x2go.org id=B372.138719722214987
          (code B ref 372); Mon, 16 Dec 2013 12:48:02 +0000
Received: (at 372) by bugs.x2go.org; 16 Dec 2013 12:33:42 +0000
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on
	ymir.das-netzwerkteam.de
X-Spam-Level: 
X-Spam-Status: No, score=-2.6 required=5.0 tests=BAYES_00,FREEMAIL_FROM,
	RCVD_IN_DNSWL_LOW,T_DKIM_INVALID,URIBL_BLOCKED autolearn=ham version=3.3.2
Received: from mail-qe0-f41.google.com (mail-qe0-f41.google.com [209.85.128.41])
	by ymir (Postfix) with ESMTPS id C141B5DB16
	for <372@bugs.x2go.org>; Mon, 16 Dec 2013 13:33:41 +0100 (CET)
Received: by mail-qe0-f41.google.com with SMTP id gh4so3869259qeb.0
        for <372@bugs.x2go.org>; Mon, 16 Dec 2013 04:33:40 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :cc:content-type;
        bh=vUu7kxlB/O6GBRNVY5zrM4KU39cghbNSeYTo4xwQGVc=;
        b=TxQyBn5ogbQG23lB3HKXM9FBg6obaNZ9xVg8NZ7bxBoZKI367SorJ8cC+QPq8fincQ
         0hj9K7FfNqTTsdcMr8LwqpJrewNn/tCKJmuAXL4ng8W9mmypGHHrOTvqbc6MUXK7pSuR
         rMHxv0T1oT+g2XDT1Afm95SIzFeW+8xysXCre7IgmMZapcq9mzFFQ6FbajkAN3EQr813
         QgfBmEhWeAzXJru7cRZs5DYMwhlGg/ejQ0T+ilsELQtfG3ppmXTTVzzgrIpGxqPLdCrp
         rhb8fkAPtDbJ50Epf9FQD5jYoAAKhi4UkATgrmmMXBi9/5zrKkKAqLaonux1bPUXKhZb
         JTlw==
MIME-Version: 1.0
X-Received: by 10.224.34.71 with SMTP id k7mr8897497qad.15.1387197220438; Mon,
 16 Dec 2013 04:33:40 -0800 (PST)
Received: by 10.96.78.227 with HTTP; Mon, 16 Dec 2013 04:33:40 -0800 (PST)
In-Reply-To: <20131216073434.Horde.PERNE-ga0mmuL2Mohe-6VA2@mail.das-netzwerkteam.de>
References: <CAJ0cceZBqnQ1MfvTFfP7i55MtTi-cyjyABD8TtjHbi9kcxg=2A@mail.gmail.com>
	<20131216073434.Horde.PERNE-ga0mmuL2Mohe-6VA2@mail.das-netzwerkteam.de>
Date: Mon, 16 Dec 2013 07:33:40 -0500
Message-ID: <CAJ0cceY7Y36-Kd7gq=NQWLXx5tE3C9GtmikAkso-9ANqqkEy8A@mail.gmail.com>
From: Reinhard Tartler <siretart@gmail.com>
To: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>
Cc: 372@bugs.x2go.org, o.schneyder@phoca-gmbh.de
Content-Type: text/plain; charset=ISO-8859-1

On Mon, Dec 16, 2013 at 2:34 AM, Mike Gabriel
<mike.gabriel@das-netzwerkteam.de> wrote:
> I install x2goserver on the file servers and run x2godbadmin there daily in
> a cron job.
>
> If you have distributed file servers, one should test for the $HOME to be
> accessible in x2godbadmin.

What to do if it isn't accesible? Then the user won't get a password
to access the postgres, and x2godbadmin will fail silently. That's
even worse!

> If needed, we could split out x2godbadmin from the x2goserver package and
> provide it as a standalone package.

I don't see any benefit in doing so other than moving the problem
around instead of solving it.

Cheers,

-- 
regards,
    Reinhard

Send a report that this bug log contains spam.

X2Go Developers <owner@bugs.x2go.org>. Last modified: Sun Dec 7 10:03:35 2025; Machine Name: ymir.das-netzwerkteam.de

X2Go Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.