X2Go Bug report logs - #855
x2goclient deletes important files that it should leave untouched

version graph

Package: x2goclient; Maintainer for x2goclient is X2Go Developers <x2go-dev@lists.x2go.org>; Source for x2goclient is src:x2goclient.

Reported by: Stefan Baur <X2Go-ML-1@baur-itcs.de>

Date: Sun, 26 Apr 2015 14:00:02 UTC

Severity: grave

Found in version 4.1.0.0

Reply or subscribe to this bug.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to x2go-dev@lists.x2go.org, X2Go Developers <x2go-dev@lists.x2go.org>:
Bug#855; Package x2goclient. (Sun, 26 Apr 2015 14:00:02 GMT) Full text and rfc822 format available.

Acknowledgement sent to Stefan Baur <X2Go-ML-1@baur-itcs.de>:
New Bug report received and forwarded. Copy sent to X2Go Developers <x2go-dev@lists.x2go.org>. (Sun, 26 Apr 2015 14:00:02 GMT) Full text and rfc822 format available.

Message #5 received at submit@bugs.x2go.org (full text, mbox):

From: Stefan Baur <X2Go-ML-1@baur-itcs.de>
To: submit@bugs.x2go.org
Subject: x2goclient deletes important files that it should leave untouched
Date: Sun, 26 Apr 2015 15:56:37 +0200
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

package: x2goclient
severity: grave

Calling X2GoClient like this:
x2goclient  --portable --broker-autologin \
   --broker-url=ssh://user@host:22/usr/bin/x2gobroker

*DELETES* the content of the current user's .ssh folder when
X2GoClient is closed.

This should *never* happen - but it is absolutely happening on Linux
(haven't tried Windows yet).

I am assuming it has to do with --portable rather than with the broker
parameters.

Even though this bug is a Linux bug, and the bug report
http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=52 is about a Windows
issue with x2goclient, they still might be related to each other, as
it also contains the --portable option and files are being deleted
that should be left in place.
And as it looks like, this one never got fixed either.

- -Stefan
- -- 
BAUR-ITCS UG (haftungsbeschränkt)
Geschäftsführer: Stefan Baur
Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364
Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJVPO6VAAoJEG7d9BjNvlEZOeUH/05AhgZNsv6t6YT9VHpA2xoW
s3+P5Crg9RSvNnYoqHr4+qbv6JfUTlpKeKsU1b7DG3RnLxzCU2+X/PnRk5Oshnxq
HkFdtPy+EcZo7cTK+fbcHS4MO4iX3edfXybTuOh0iPCspA8OL9yzRHPp357qeqSe
akiOvPj7rYdFZyLwmWBgNLmetAXTSzEpMFAjgg+NH6kuonTRWU2nKmdnUwiOd42T
cj9M1V2+hYkKGnX8RTYhvh5FLSv2ALOvDrdMrd0IqHX74x0N0Uv7CJ7UPGZ0YqKn
zC8jwETBho9hQ5rF1+SYekEe+sCq+No5VdvVBOtEyHVhAb4wf9+BC+8OEYVy5YE=
=RT0d
-----END PGP SIGNATURE-----


Information forwarded to x2go-dev@lists.x2go.org, X2Go Developers <x2go-dev@lists.x2go.org>:
Bug#855; Package x2goclient. (Mon, 19 Feb 2018 13:00:02 GMT) Full text and rfc822 format available.

Acknowledgement sent to Stefan Baur <X2Go-ML-1@baur-itcs.de>:
Extra info received and forwarded to list. Copy sent to X2Go Developers <x2go-dev@lists.x2go.org>. (Mon, 19 Feb 2018 13:00:03 GMT) Full text and rfc822 format available.

Message #10 received at 855@bugs.x2go.org (full text, mbox):

From: Stefan Baur <X2Go-ML-1@baur-itcs.de>
To: 855@bugs.x2go.org
Subject: Update on file deletion issue in portable mode
Date: Mon, 19 Feb 2018 13:44:30 +0100
[Message part 1 (text/plain, inline)]
Package: x2goclient
Version: 4.1.0.0
Severity: grave

When you install X2GoClient on Windows in portable mode, in the
directory some_dir\x2goclient, and create a batch file to start it in
porable mode as some_dir\x2goclient.cmd, with the following content:

@echo off
cd /d %~dp0\x2goclient
start "X2GoClient" x2goclient.exe --portable

Then, either upon connecting to a server (causing ssh\known_hosts to be
created/updated), or upon closing of x2goclient, the content of these
directories gets deleted (save for the file ssh\known_hosts):

some_dir\x2goclient\.ssh
some_dir\x2goclient\ssh

Obviously, this is NOT good, because people will be tempted to store
their private keys in that directory, only to find them gone afterwards.

My guess is that it hits .ssh as well because .ssh is no regular FAT
file name, but rather one that can only be created in cmd.exe with "md
.ssh", and probably only works on VFAT, not regular FAT, so a routine
looking to match ssh that isn't VFAT-safe will hit .ssh instead.

Could it be that we have a bug in x2goclient that purges the ssh
directory whenever known_hosts is accessed for writing, or similar?

Kind Regards,
Stefan Baur

-- 
BAUR-ITCS UG (haftungsbeschränkt)
Geschäftsführer: Stefan Baur
Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364
Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243

[signature.asc (application/pgp-signature, attachment)]

Send a report that this bug log contains spam.


X2Go Developers <owner@bugs.x2go.org>. Last modified: Tue Dec 18 11:34:23 2018; Machine Name: ymir.das-netzwerkteam.de

X2Go Bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.