[Bug 1749148] Re: [MIR] xrdp
[Expired for xrdp (Ubuntu) because there has been no activity for 60 days.] ** Changed in: xrdp (Ubuntu) Status: Incomplete => Expired -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1749148 Title: [MIR] xrdp To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/xrdp/+bug/1749148/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1749148] Re: [MIR] xrdp
We are going to defer this MIR for now. It's not useful to us until upstream adds support for conf.d style configuration. ** Changed in: xrdp (Ubuntu) Assignee: Ubuntu Security Team (ubuntu-security) => (unassigned) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1749148 Title: [MIR] xrdp To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/xrdp/+bug/1749148/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1749148] Re: [MIR] xrdp
** Changed in: xrdp (Ubuntu) Importance: Undecided => High -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1749148 Title: [MIR] xrdp To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/xrdp/+bug/1749148/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1749148] Re: [MIR] xrdp
- xrdp is missing a bug subscriber. - How does this integrate in a world with wayland, since xrdp only appears to do X? - I am a bit concerned by the xrdp-pulseaudio-installer, seems like we should just have the necessary bits pre-built as part of the pulseaudio package, or as an additional package, rather than building on install of something else. - Given the high complexity of the package, the existance of assembly bits (I can't exactly review that) for various RGP/YUV/YVY/etc conversion and cpuid, an history of CVE issues in xrdp itself and the integration story for login / remote desktop, we should have a go-ahead by the Security Team. ** Changed in: xrdp (Ubuntu) Status: In Progress => Incomplete ** Changed in: xrdp (Ubuntu) Assignee: Mathieu Trudel-Lapierre (cyphermox) => Ubuntu Security Team (ubuntu-security) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1749148 Title: [MIR] xrdp To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/xrdp/+bug/1749148/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1749148] Re: [MIR] xrdp
Reviewing this now. ** Changed in: xrdp (Ubuntu) Status: New => In Progress ** Changed in: xrdp (Ubuntu) Assignee: (unassigned) => Mathieu Trudel-Lapierre (cyphermox) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1749148 Title: [MIR] xrdp To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/xrdp/+bug/1749148/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1749148] Re: [MIR] xrdp
** Description changed: [Availability] xrdp is in Universe and has no deps outside of main. xorgxrdp is built from the same source package. [Rationale] We want to make Ubuntu (desktop) integrate well in to as many other operating systems as we can when running as a VM guest. RDP is a good choice for this, especially on Windows, as it offers good integration and can utilise the tools already installed on the host. This will make Ubuntu (desktop) perform and integrate well when running as a guest, and show off the desktop in the best light. [Security] The package has had three CVEs in the last five years. All of them were fixed upstream quickly. http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=xrdp - It uses port 3389. [TODO: Need to find out if this port is opened - automatically, in which case we need to lock it down to not be open by - default. We (desktop) will look in to this now and update this summary - as needed] + It uses port 3389. This is open to localhost, but not to the actual IP + of the machine. [Quality assurance] There are a relatively low number of bugs in Launchpad. This package is well maintained in Debian and upstream are actively developing it. [Dependencies] All binary deps are in main, or come from the same source package. [Standards compliance] FHS compliant Debian Policy compliance: - * xorgxrdp includes statically linked xorg modules (xrdpdev_drv.a) as well as shared object (xrdpdev_drv.so) - * xrdp includes headers and statically linked libs as well as the shared libs + * xorgxrdp includes statically linked xorg modules (xrdpdev_drv.a) as well as shared object (xrdpdev_drv.so) + * xrdp includes headers and statically linked libs as well as the shared libs Packaging users debhelper compat 11 and quilt [Maintenance] Desktop Team will take on maintenance of this package. [Background information] This package provides two levels of functionality. It can turn an Ubuntu machine in to a terminal server, hosting many remote sessions from a single machine. Or it can allow remote KVM(and sound) access to a logged in session to allow the desktop to be viewed from another location. It is expected that this second mode will be the default and most useful for most users. ** Description changed: [Availability] xrdp is in Universe and has no deps outside of main. xorgxrdp is built from the same source package. [Rationale] We want to make Ubuntu (desktop) integrate well in to as many other operating systems as we can when running as a VM guest. RDP is a good choice for this, especially on Windows, as it offers good integration and can utilise the tools already installed on the host. This will make Ubuntu (desktop) perform and integrate well when running as a guest, and show off the desktop in the best light. [Security] The package has had three CVEs in the last five years. All of them were fixed upstream quickly. http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=xrdp - It uses port 3389. This is open to localhost, but not to the actual IP - of the machine. + It uses port 3389. By default on install this is open to "localhost" + but the IP address of the machine is not bound to that interface, hence + you can only connect from the local machine. [Quality assurance] There are a relatively low number of bugs in Launchpad. This package is well maintained in Debian and upstream are actively developing it. [Dependencies] All binary deps are in main, or come from the same source package. [Standards compliance] FHS compliant Debian Policy compliance: * xorgxrdp includes statically linked xorg modules (xrdpdev_drv.a) as well as shared object (xrdpdev_drv.so) * xrdp includes headers and statically linked libs as well as the shared libs Packaging users debhelper compat 11 and quilt [Maintenance] Desktop Team will take on maintenance of this package. [Background information] This package provides two levels of functionality. It can turn an Ubuntu machine in to a terminal server, hosting many remote sessions from a single machine. Or it can allow remote KVM(and sound) access to a logged in session to allow the desktop to be viewed from another location. It is expected that this second mode will be the default and most useful for most users. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1749148 Title: [MIR] xrdp To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/xrdp/+bug/1749148/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1749148] Re: [MIR] xrdp
** Description changed: [Availability] xrdp is in Universe and has no deps outside of main. xorgxrdp is built from the same source package. [Rationale] We want to make Ubuntu (desktop) integrate well in to as many other operating systems as we can when running as a VM guest. RDP is a good choice for this, especially on Windows, as it offers good integration and can utilise the tools already installed on the host. This will make Ubuntu (desktop) perform and integrate well when running as a guest, and show off the desktop in the best light. [Security] The package has had three CVEs in the last five years. All of them were fixed upstream quickly. http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=xrdp - It uses port 3389. By default on install this is open to "localhost" - but the IP address of the machine is not bound to that interface, hence - you can only connect from the local machine. + It uses port 3389. [TODO: Need to find out if this port is opened + automatically, in which case we need to lock it down to not be open by + default. We (desktop) will look in to this now and update this summary + as needed] [Quality assurance] There are a relatively low number of bugs in Launchpad. This package is well maintained in Debian and upstream are actively developing it. [Dependencies] All binary deps are in main, or come from the same source package. [Standards compliance] + FHS compliant + Debian Policy compliance: + * xorgxrdp includes statically linked xorg modules (xrdpdev_drv.a) as well as shared object (xrdpdev_drv.so) + * xrdp includes headers and statically linked libs as well as the shared libs + + Packaging users debhelper compat 11 and quilt [Maintenance] Desktop Team will take on maintenance of this package. [Background information] This package provides two levels of functionality. It can turn an Ubuntu machine in to a terminal server, hosting many remote sessions from a single machine. Or it can allow remote KVM(and sound) access to a logged in session to allow the desktop to be viewed from another location. It is expected that this second mode will be the default and most useful for most users. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1749148 Title: [MIR] xrdp To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/xrdp/+bug/1749148/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1749148] Re: [MIR] xrdp
** Description changed: [Availability] xrdp is in Universe and has no deps outside of main. xorgxrdp is built from the same source package. - [Rationale] We want to make Ubuntu (desktop) integrate well in to as many other operating systems as we can when running as a VM guest. RDP is a good choice for this, especially on Windows, as it offers good integration and can utilise the tools already installed on the host. This will make Ubuntu (desktop) perform and integrate well when running as a guest, and show off the desktop in the best light. [Security] - The package has had three CVEs in the last five years. All of them were fixed upstream quickly. + The package has had three CVEs in the last five years. All of them were fixed upstream quickly. http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=xrdp - It uses port 3389. [TODO: Need to find out if this port is opened - automatically, in which case we need to lock it down to not be open by - default. We (desktop) will look in to this now and update this summary - as needed] + It uses port 3389. By default on install this is open to "localhost" + but the IP address of the machine is not bound to that interface, hence + you can only connect from the local machine. [Quality assurance] There are a relatively low number of bugs in Launchpad. This package is well maintained in Debian and upstream are actively developing it. [Dependencies] All binary deps are in main, or come from the same source package. [Standards compliance] [Maintenance] Desktop Team will take on maintenance of this package. [Background information] This package provides two levels of functionality. It can turn an Ubuntu machine in to a terminal server, hosting many remote sessions from a single machine. Or it can allow remote KVM(and sound) access to a logged in session to allow the desktop to be viewed from another location. It is expected that this second mode will be the default and most useful for most users. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1749148 Title: [MIR] xrdp To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/xrdp/+bug/1749148/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
