X2Go Bug report logs - #476
User1 can use X session from other users

Package: x2goserver; Maintainer for x2goserver is X2Go Developers <x2go-dev@lists.x2go.org>; Source for x2goserver is src:x2goserver.

Reported by: thegala@openmailbox.org

Date: Fri, 11 Apr 2014 18:40:01 UTC

Severity: normal

Tags: moreinfo, wontfix

Done: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>

Bug is archived. No further changes may be made.

Full log


Message #12 received at 476@bugs.x2go.org (full text, mbox, reply):

Received: (at 476) by bugs.x2go.org; 6 May 2014 10:02:41 +0000
From mike.gabriel@das-netzwerkteam.de  Tue May  6 12:02:41 2014
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on
	ymir.das-netzwerkteam.de
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,
	RCVD_IN_DNSWL_BLOCKED,URIBL_BLOCKED autolearn=ham version=3.3.2
Received: from freya.das-netzwerkteam.de (freya.das-netzwerkteam.de [88.198.48.199])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTPS id 47B0D5DB15
	for <476@bugs.x2go.org>; Tue,  6 May 2014 12:02:41 +0200 (CEST)
Received: from grimnir.das-netzwerkteam.de (grimnir.das-netzwerkteam.de [78.46.204.98])
	by freya.das-netzwerkteam.de (Postfix) with ESMTPS id 28D3B52B2;
	Tue,  6 May 2014 12:02:39 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
	by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id BF9933BAB3;
	Tue,  6 May 2014 12:02:40 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at grimnir.das-netzwerkteam.de
Received: from grimnir.das-netzwerkteam.de ([127.0.0.1])
	by localhost (grimnir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id OU4UbZa2jDef; Tue,  6 May 2014 12:02:40 +0200 (CEST)
Received: from grimnir.das-netzwerkteam.de (localhost [127.0.0.1])
	by grimnir.das-netzwerkteam.de (Postfix) with ESMTPS id 85DC93B98E;
	Tue,  6 May 2014 12:02:40 +0200 (CEST)
Received: from pD9E9FC55.dip0.t-ipconnect.de (pD9E9FC55.dip0.t-ipconnect.de
 [217.233.252.85]) by mail.das-netzwerkteam.de (Horde Framework) with HTTP;
 Tue, 06 May 2014 10:02:40 +0000
Date: Tue, 06 May 2014 10:02:40 +0000
Message-ID: <20140506100240.Horde.gFV45oG9EcuPjw1og09GGQ7@mail.das-netzwerkteam.de>
From: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>
To: thegala@openmailbox.org
Cc: 476@bugs.x2go.org
Subject: Known issue if the distro is too sloppy with xhost command
User-Agent: Internet Messaging Program (IMP) H5 (6.1.7)
Accept-Language: en,de
Organization: DAS-NETZWERKTEAM
X-Originating-IP: 217.233.252.85
X-Remote-Browser: Mozilla/5.0 (X11; Linux x86_64; rv:26.0) Gecko/20100101
 Firefox/26.0 Iceweasel/26.0
Content-Type: multipart/signed; boundary="=_3oSZUkWReTt4NPq0YhcNQw3";
 protocol="application/pgp-signature"; micalg=pgp-sha1
MIME-Version: 1.0
[Message part 1 (text/plain, inline)]
Control: tag -1 moreinfo
Control: tag -1 wontfix

Hi,

thanks for reporting a bug to the X2Go bugtracker. Sorry for the delay  
in reply.

I presume that you use a distribution like Linux Mint or other that  
tends to be a little sloppy with the X11 security settings (by running  
the xhost + command).

For further reference, please see [1].

If you feel that your X11 security is intact and you still observe the  
reported issue, please get back to this bug and give more information  
on your setup.

Thanks+Greets,
Mike

[1] http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=287


-- 

DAS-NETZWERKTEAM
mike gabriel, herweg 7, 24357 fleckeby
fon: +49 (1520) 1976 148

GnuPG Key ID 0x25771B31
mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de

freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb
[Message part 2 (application/pgp-signature, inline)]

Send a report that this bug log contains spam.


X2Go Developers <owner@bugs.x2go.org>. Last modified: Thu Nov 21 15:31:50 2024; Machine Name: ymir.das-netzwerkteam.de

X2Go Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.