From mike.gabriel@das-netzwerkteam.de Fri Jan 16 13:45:19 2015 Received: (at submit) by bugs.x2go.org; 16 Jan 2015 12:45:20 +0000 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on ymir.das-netzwerkteam.de X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,URIBL_BLOCKED autolearn=ham version=3.3.2 Received: from freya.das-netzwerkteam.de (freya.das-netzwerkteam.de [88.198.48.199]) by ymir.das-netzwerkteam.de (Postfix) with ESMTPS id 3A09E5DEA3 for ; Fri, 16 Jan 2015 13:45:18 +0100 (CET) Received: from grimnir.das-netzwerkteam.de (grimnir.das-netzwerkteam.de [78.46.204.98]) by freya.das-netzwerkteam.de (Postfix) with ESMTPS id D50BC16EE for ; Fri, 16 Jan 2015 13:45:17 +0100 (CET) Received: from localhost (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id 223403C09A for ; Fri, 16 Jan 2015 13:45:17 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at grimnir.das-netzwerkteam.de Received: from grimnir.das-netzwerkteam.de ([127.0.0.1]) by localhost (grimnir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eu1Sq7ZnATrJ for ; Fri, 16 Jan 2015 13:45:17 +0100 (CET) Received: from grimnir.das-netzwerkteam.de (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTPS id E08063BAB6 for ; Fri, 16 Jan 2015 13:45:16 +0100 (CET) Received: from bifrost.das-netzwerkteam.de (bifrost.das-netzwerkteam.de [178.62.101.154]) by mail.das-netzwerkteam.de (Horde Framework) with HTTP; Fri, 16 Jan 2015 12:45:16 +0000 Date: Fri, 16 Jan 2015 12:45:16 +0000 Message-ID: <20150116124516.Horde.vEsmgsQwypKyvJBMx9y93w7@mail.das-netzwerkteam.de> From: Mike Gabriel To: submit@bugs.x2go.org Subject: X2Go Client starts with --add-to-known-hosts User-Agent: Internet Messaging Program (IMP) H5 (6.2.2) Accept-Language: en,de Organization: DAS-NETZWERKTEAM X-Originating-IP: 178.62.101.154 X-Remote-Browser: Mozilla/5.0 (X11; Linux x86_64; rv:32.0) Gecko/20100101 Firefox/32.0 Iceweasel/32.0 Content-Type: multipart/signed; boundary="=_VDqMxfjNlKQOS3BxpamOpg3"; protocol="application/pgp-signature"; micalg=pgp-sha1 MIME-Version: 1.0 This message is in MIME format and has been PGP signed. --=_VDqMxfjNlKQOS3BxpamOpg3 Content-Type: text/plain; charset=UTF-8; format=flowed; DelSp=Yes Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Package: x2gothinclient-displaymanager In X2Go TCE setups, X2Go Client always starts with option=20=20 --add-to-known-hosts.=20Thus, the host key of a remote server X2Go=20=20 Server=20gets never verified by the end user. A proper solution would be to provide SSH known_hosts keys of known=20=20 X2Go=20Servers inside a TCE/chroot system-wide known_hosts file. Mike --=20 DAS-NETZWERKTEAM mike=20gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x= fb --=_VDqMxfjNlKQOS3BxpamOpg3 Content-Type: application/pgp-signature Content-Description: Digitale PGP-Signatur Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAABAgAGBQJUuQfcAAoJEJr0azAldxsxUO4P/jrpewlBLhBo1b+87TMZBYM2 LROKXHRQP/RWVnEyEZT6sLQS78zUc+d/+E0GfIfejLEQrNwtGLExle+/Sn0s18fc sEOMBu0+K00MhsdyZsPXzCng1D3r1TBOr6t/vNCkENsfyyTJzpZ5u56a6hOZK/jd D3hSGfzAd95DfZgE9smShYczpiYQFFkzUW/HWnQ6ffSsI50RBLx/E0FOOs0hCIk4 Qd7Th+7FP8gNU9VDY5E1jhZb7fR8pRBp5PjqXNnTzhSm9+fKQmvbvtqQlj5pNR06 9xdYGLRTh6m1YA/DszQSM8QvV6Pd+66J8wT5KuHzEIjK+V+UwZ3v2CQK7lkNpKxj T6xxB8IJ8OvzEXhq9KCUZc9DC99KIEcUdwr3JfmV8x719qJ1Q7mPGZF05CdsEpwY X5ZdpUhx/PxhoSyr6ZmMuDXpDaSa1xxfyVoOaRHctpJmN4/4GLejku1JtI5LJj6d wANrO81x6JDEfESSgdrpPoxNCEbWGp9pHmW8RYm94bPNtwidozLQCKQJ2u/pIXrI reg3ZU6XiDS0oWOM3ukvwulNmEgS0euV+1Zy2JLDkbapRY1HQs1dnoSVE957Q5g+ EMIG0tgSTXVqqRj+REi31UIem+meZP76TyE2O6gc+Uaat85Zx+EC4UxhA0i0WUhD +4af0cc2XBiEqGD7D6BC =WbU8 -----END PGP SIGNATURE----- --=_VDqMxfjNlKQOS3BxpamOpg3--